From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: GNU Emacs-libnettle-libhogweed integration patch v1 Date: Sun, 06 Oct 2013 17:19:56 -0400 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <87mwmmp05f.fsf@flea.lifelogs.com> References: <877gdqrc9u.fsf@flea.lifelogs.com> Reply-To: emacs-devel@gnu.org NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1381094410 4219 80.91.229.3 (6 Oct 2013 21:20:10 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sun, 6 Oct 2013 21:20:10 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Oct 06 23:20:13 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VSvkL-0000LZ-4l for ged-emacs-devel@m.gmane.org; Sun, 06 Oct 2013 23:20:13 +0200 Original-Received: from localhost ([::1]:56480 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VSvkK-0001ZK-AS for ged-emacs-devel@m.gmane.org; Sun, 06 Oct 2013 17:20:12 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:49419) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VSvkB-0001UF-GW for emacs-devel@gnu.org; Sun, 06 Oct 2013 17:20:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VSvk5-0007PD-Ln for emacs-devel@gnu.org; Sun, 06 Oct 2013 17:20:03 -0400 Original-Received: from plane.gmane.org ([80.91.229.3]:48788) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VSvk5-0007P9-Em for emacs-devel@gnu.org; Sun, 06 Oct 2013 17:19:57 -0400 Original-Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1VSvk4-0000G1-Uw for emacs-devel@gnu.org; Sun, 06 Oct 2013 23:19:56 +0200 Original-Received: from c-98-229-61-72.hsd1.ma.comcast.net ([98.229.61.72]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 06 Oct 2013 23:19:56 +0200 Original-Received: from tzz by c-98-229-61-72.hsd1.ma.comcast.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 06 Oct 2013 23:19:56 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: emacs-devel@gnu.org Original-Lines: 34 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: c-98-229-61-72.hsd1.ma.comcast.net X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/24.3.50 (gnu/linux) Cancel-Lock: sha1:GwHjD7W8a/yUoEZFD5zBGPLjH64= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.229.3 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:163930 Archived-At: On Sun, 06 Oct 2013 12:51:39 -0400 Stefan Monnier wrote: >> This is the first cut of the Nettle integration for your review. SM> I generally dislike adding library dependencies to Emacs, even for SM> libraries on which we already depend transitively. So, there has to be SM> a very good use case for it. SM> Currently, I don't see such a use case, so I'm not interested. I certainly hope others see the utility of the work, especially so I can implement OpenPGP support and avoid depending on the external GnuPG binary for verifying package signatures. It would also let me implement binary signatures of Emacs data (to make sure it's not corrupted) and true secrets (Lisp data strings that can't be decoded without the right key). But I've stated all this already, so it's unfortunate that I have to restate and defend it. Meanwhile I will try to finish the patch, but it's discouraging to have to argue for basic security in Emacs for years and to spend significant time writing code that will hang in limbo and may need to be significantly rebased by the time it's accepted (if ever). SM> Implementing an FFI would of course make it unnecessary for you (or SM> anyone else) to convince me first, so I encourage you to work on the FFI SM> as a first step. Well, sure, I'd love to, if I knew anything about the topic. I can help document and test things, and maybe review some of the code. My primary concern is that I have to redo a significant amount of work by the time the Nettle patch is accepted, so it would have been nice to state your opposal earlier. I certainly stated my intentions clearly. Thanks Ted