From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Po Lu Newsgroups: gmane.emacs.devel Subject: Re: Security in the emacs package ecosystem Date: Mon, 20 Feb 2023 14:23:35 +0800 Message-ID: <87k00cg8ig.fsf@yahoo.com> References: <8735hatt4m.fsf@alshehhi.io> <87fsblfuc6.fsf@localhost> <87wn4gd232.fsf@localhost> <87a61bkzq9.fsf@localhost> <83edqnyz00.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="17526"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Cc: Eli Zaretskii , yantar92@posteo.net, stefankangas@gmail.com, husain@alshehhi.io, emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon Feb 20 07:26:32 2023 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pTzd9-0004LO-S1 for ged-emacs-devel@m.gmane-mx.org; Mon, 20 Feb 2023 07:26:31 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pTzcV-0003Ky-Fe; Mon, 20 Feb 2023 01:25:51 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTzcT-0003Kb-St for emacs-devel@gnu.org; Mon, 20 Feb 2023 01:25:49 -0500 Original-Received: from sonic316-49.consmr.mail.ne1.yahoo.com ([66.163.187.175]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pTzcS-0007gW-4V for emacs-devel@gnu.org; Mon, 20 Feb 2023 01:25:49 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1676874344; bh=TftCVqJpNAohP71TxE2OxImZZqGn1TSlDCbyHNtdS+w=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From:Subject:Reply-To; b=sO1d5ES2VOXSZySgVCflo7uOeK1whAMfbCxnl1PBIqHbwrUMSttMP0FGzStOUYLESdI3VagPoSHG6Ubdk0wrr3zH3/7qJ+pURXvHuwkS2eynJp7vySr9F2fBrYCM8aQZa9sKeAjAPQ7+zY5ZL8+UdSkaYkPDM5XfmJE1KqIHIgrpjEpP0ZOqGKHTntHFj/lS++OGy491aIdbJh2DxlrJw18LV26FJOsfz0u8wLZkF4jinGOakCxSW1E351+ffBiaZ8pjz+DCEsUtvUdfYVB3NYQoAjt2Nuv3N62yY6jGx4gFP8G8DihJcvyqm7vhbdwAWX76zUjllKK6z+e2DeIVaw== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1676874344; bh=oKU/q01LPlYjwexLwlLizvk18T8hal0cUompPH4W/Sb=; h=X-Sonic-MF:From:To:Subject:Date:From:Subject; b=SBZ66Yu0ABG4LNjBJYORq6AO7y9hgFOe5gWX4AsyUNvIbs+BbhA8XHHsLspiR5t3sqmZ9ybj9jhKNz0diE+DNTFmBYgQD+g+wNUo/rKbV6OGN2gB4kvT88x1L2v2U1hBG6dm1RMhGq8rxWj7wrXp3MiUCGxLMRXObrg+NyibdtNwd5gGhTWEy9Chbp7DOuAW+Ve/CJuRiC8g/PdEx6IPvoEsyu0Px/MbmUGNzgyZoCSFIqZoyZ/JEhxDMUmVsZoFYnNalW+8qNUFnZN1kHLBhc6yDcdrNlofL+JmFMDZj2OoFRGuXG+ur+PCrdfk5l9fSOjyZ6FptUt1Bnd9mmSz6Q== X-YMail-OSG: 1W8URPgVM1nQFuIE3oPFIdsLTkJcEkDrml.5Jz_XugrOBpw5OT6KYMpS5QjR4Pf rl.d3yPuOdSrVMVkfMzIuJxQQKVhTBXG2KcYak3ZHp9eeNQ916Fsrd7hbuXzlGzFfFyi.vnRoELc 63ghMNRSviWqfq361bJcGx.LbrYkwy52YjGRJ2ms.KGtaE9ypWRDNlKGmEZ_PlH8ALFbLl9yDvRz rELFUiKaizqwrlP9YbgaQaRFBkemtvr2T8U42yVUnIj8qADLH4hZv6T1w8XPRbrehsIEgOme2dHd Sys.SW3VjqU5H4BgnyD77_BTrnLsFMMhVS9AWVnJHaYaFThx7YUBv_SZpuL5d6AalK8C96Jy4nrn 9.mhYumYUaNKKR509VNEwohnUBUL3oES4OQQn74MOuXCnsPr99folFtMgEXeKQHDoN_I3Ps2WAbl CecTZYZ6U2iUB1czrS4_Sl6JUUVraLzb7WaNykhNw6t2jTeu7s4ET36XnMm_uYxbuMXxAcX5ZBnl rD.DZlbgSFqoZa_iqSZwvG1xrnntcTiW_kOdUXBBuPHjcEEw3j41VrCmehHsF91i27ILQSRTw0XO Im1Kbl.e0nCWcKb_yFR._ZH0lZBKO.m_PoHP1PmmdXlQ1EC1JnABbj6V8w_QhVd77KDgvmlLh2zN 3AsyNq3JJdHjwpLCZOxw2Fofyedt_N2VSf7Me6QEeUMQrLS9wQgMRrkE3Cmt0Y5j3Oy8lSNePoWz 6DN6AVWLQUbpxEVRQe6Ip_1qWGPU1gxWQGn90W8aB69D_sf6VLVL0WDDOT.8xsYQSYK9Z_xVpDji sj5dm2Jj5CRLTAG8w9yTMmTCuHXivbLeHqpVFtt9.A X-Sonic-MF: Original-Received: from sonic.gate.mail.ne1.yahoo.com by sonic316.consmr.mail.ne1.yahoo.com with HTTP; Mon, 20 Feb 2023 06:25:44 +0000 Original-Received: by hermes--production-sg3-9fc5746c8-97g7j (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 069b2f49d275aa0b199fa3e8e380e0ab; Mon, 20 Feb 2023 06:23:41 +0000 (UTC) In-Reply-To: (Richard Stallman's message of "Mon, 20 Feb 2023 00:18:42 -0500") X-Mailer: WebService/1.1.21183 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo Received-SPF: pass client-ip=66.163.187.175; envelope-from=luangruo@yahoo.com; helo=sonic316-49.consmr.mail.ne1.yahoo.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=unavailable autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.devel:303596 Archived-At: Richard Stallman writes: > Alternatively, we could use Autoconf to check for GPG or PGP > when building Emacs. That will not work if GPG or PGP is installed after building Emacs.