From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: convenient digital signing for el files and snippets Date: Wed, 09 Mar 2011 11:43:55 -0600 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <8739mwp4tg.fsf@lifelogs.com> References: <87k4g83jr6.fsf@geneva.hpsy.me> <87zkp4pavn.fsf@lifelogs.com> <87bp1k2ra5.fsf@geneva.hpsy.me> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1299692700 13995 80.91.229.12 (9 Mar 2011 17:45:00 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Wed, 9 Mar 2011 17:45:00 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Mar 09 18:44:56 2011 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1PxNRO-0007YD-NB for ged-emacs-devel@m.gmane.org; Wed, 09 Mar 2011 18:44:54 +0100 Original-Received: from localhost ([127.0.0.1]:47052 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1PxNRN-0002EI-NV for ged-emacs-devel@m.gmane.org; Wed, 09 Mar 2011 12:44:53 -0500 Original-Received: from [140.186.70.92] (port=38296 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1PxNQf-0001sk-D3 for emacs-devel@gnu.org; Wed, 09 Mar 2011 12:44:10 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1PxNQe-0004gO-4C for emacs-devel@gnu.org; Wed, 09 Mar 2011 12:44:09 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]:51680) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1PxNQd-0004gF-Ud for emacs-devel@gnu.org; Wed, 09 Mar 2011 12:44:08 -0500 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1PxNQc-0007AS-K9 for emacs-devel@gnu.org; Wed, 09 Mar 2011 18:44:06 +0100 Original-Received: from 38.98.147.130 ([38.98.147.130]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 09 Mar 2011 18:44:06 +0100 Original-Received: from tzz by 38.98.147.130 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 09 Mar 2011 18:44:06 +0100 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 21 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: 38.98.147.130 X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" User-Agent: Gnus/5.110014 (No Gnus v0.14) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:PTSy+aD6lnUTHIKMMkFPok1FZns= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 80.91.229.12 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:136975 Archived-At: On Wed, 09 Mar 2011 10:27:14 -0600 Joseph Gay wrote: >> - older and legacy code doesn't have to be modified to be signed JG> This wouldn't affect unsigned code. It would be treated the same as it JG> is now. Only for things that are signed would there be any potential JG> benefit (assurance that the signature is trusted and validated). Right. So what could make the hundreds of EmacsWiki contributors add this extra code to their source? And what benefit is it to the end user? EmacsWiki is already open to editing, so what prevents an uploader from signing malicious code? JG> I have some working code now, so I will look into what it would take to JG> implement a mechanism for ELPA, assuming that's not already in the JG> works. I'm not aware of it; the TODO list is at the beginning of package.el. If you write this I'll be glad to test it. Ted