From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: "Stephen J. Turnbull" Newsgroups: gmane.emacs.devel Subject: Re: package.el + DVCS for security and convenience Date: Mon, 31 Dec 2012 21:32:02 +0900 Message-ID: <87ehi6cshp.fsf@uwakimon.sk.tsukuba.ac.jp> References: <8738zf70ep.fsf@riseup.net> <871uejlbm1.fsf@lifelogs.com> <87obhmzl2f.fsf@bzg.ath.cx> <20121222141742.7494b429fe36e5ccef50cf6f@gmail.com> <87d2y2w9j5.fsf@uwakimon.sk.tsukuba.ac.jp> <87wqwas0gr.fsf@bzg.ath.cx> <87d2y2p6d7.fsf@bzg.ath.cx> <87sj6xg9p2.fsf_-_@lifelogs.com> <87k3s78hsc.fsf@lifelogs.com> <874njbuen3.fsf@uwakimon.sk.tsukuba.ac.jp> <87bodg7v1t.fsf@lifelogs.com> <87d2xwtcqo.fsf@uwakimon.sk.tsukuba.ac.jp> <87ip7i5v2k.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 X-Trace: ger.gmane.org 1356957138 12853 80.91.229.3 (31 Dec 2012 12:32:18 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 31 Dec 2012 12:32:18 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Dec 31 13:32:35 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1TpeXh-0008IT-1t for ged-emacs-devel@m.gmane.org; Mon, 31 Dec 2012 13:32:33 +0100 Original-Received: from localhost ([::1]:59770 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TpeXS-0000Ct-8r for ged-emacs-devel@m.gmane.org; Mon, 31 Dec 2012 07:32:18 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:56521) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TpeXP-0000AT-PV for emacs-devel@gnu.org; Mon, 31 Dec 2012 07:32:16 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TpeXK-0002K6-Hb for emacs-devel@gnu.org; Mon, 31 Dec 2012 07:32:15 -0500 Original-Received: from mgmt2.sk.tsukuba.ac.jp ([130.158.97.224]:59213) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TpeXK-0002JW-86 for emacs-devel@gnu.org; Mon, 31 Dec 2012 07:32:10 -0500 Original-Received: from uwakimon.sk.tsukuba.ac.jp (uwakimon.sk.tsukuba.ac.jp [130.158.99.156]) by mgmt2.sk.tsukuba.ac.jp (Postfix) with ESMTP id 8EABF9708C5 for ; Mon, 31 Dec 2012 21:32:02 +0900 (JST) Original-Received: by uwakimon.sk.tsukuba.ac.jp (Postfix, from userid 1000) id 543311A3222; Mon, 31 Dec 2012 21:32:02 +0900 (JST) In-Reply-To: <87ip7i5v2k.fsf@lifelogs.com> X-Mailer: VM undefined under 21.5 (beta32) "habanero" b0d40183ac79 XEmacs Lucid (x86_64-unknown-linux) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 130.158.97.224 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:156024 Archived-At: Ted Zlatanov writes: > I do not plan to be a "security officer," to prove my credentials to > your satisfaction, I didn't ask you to prove anything. I was explaining why I was worried. I still am. > Similarly, Emacs needs a secure way to get data in and out of that > storage from external files or data. Depending on an external binary > tool, *long-term*, to provide this transfer is IMO a poor security > decision for a platform such as Emacs. Yeah, well, aren't you the guy who put just such an external binary tool into Emacs, aka gnutls? The question is whether dynamic linkage is any safer than using the command line interface. > Because it will be perfect, obviously. I haven't seen anything obviously perfect since the Cheryl Tiegs Sports Illustrated cover. Good luck beating that!