From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Bastien Newsgroups: gmane.emacs.devel Subject: Re: twitter.el, anyone? Date: Mon, 20 Jan 2014 21:40:34 +0100 Message-ID: <87y52agzel.fsf@bzg.ath.cx> References: <0FA9ED19-EB0A-4CFC-826C-0CD0E6B969C3@gmail.com> <87y52hpvs9.fsf@floss.red-bean.com> <32e92d75-5646-45c8-a216-ffe88131e2df@email.android.com> <8761pivfs1.fsf@bzg.ath.cx> <87wqhw9emb.fsf@bzg.ath.cx> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1390250443 16971 80.91.229.3 (20 Jan 2014 20:40:43 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 20 Jan 2014 20:40:43 +0000 (UTC) Cc: kfogel@red-bean.com, mccracken.joel@gmail.com, monnier@iro.umontreal.ca, vibhavp@gmail.com, emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Jan 20 21:40:51 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1W5LeM-0002wv-Nu for ged-emacs-devel@m.gmane.org; Mon, 20 Jan 2014 21:40:50 +0100 Original-Received: from localhost ([::1]:54545 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W5LeM-0006Ju-Cy for ged-emacs-devel@m.gmane.org; Mon, 20 Jan 2014 15:40:50 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:35028) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W5LeF-0006Jh-1I for emacs-devel@gnu.org; Mon, 20 Jan 2014 15:40:47 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1W5LeA-0000eQ-Th for emacs-devel@gnu.org; Mon, 20 Jan 2014 15:40:42 -0500 Original-Received: from mail-wg0-x233.google.com ([2a00:1450:400c:c00::233]:34828) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W5LeA-0000eK-CP; Mon, 20 Jan 2014 15:40:38 -0500 Original-Received: by mail-wg0-f51.google.com with SMTP id z12so7180646wgg.18 for ; Mon, 20 Jan 2014 12:40:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:from:to:cc:subject:in-reply-to:references:user-agent:date :message-id:mime-version:content-type; bh=lIWkRN6CT36vjZKduJigmj9RvngDvLNaCfXjRI+aDmk=; b=Etx1JnloBpF9xuGhRj5y7WNLgcpsKCzLLQd9UDgIpHiTHYqBDUuNdABTzt4vjS1kxf rNNX0JxX+eWw/ucXUJzY92UlnHijhd9DebeFQTEHZxXeKvDArclxt5E31FtTTaYpQEdt XwlTYkql5GfcWRlcoub+zbS+P+BWhWxvIqLfxZ+Qnqo46KGCwsAotlcfQO1XNG9wFIr3 NNL6szQV0h9y31+O1AJ/n+kd++vUc3wrLs0QQ8DjTh46q7nEiVqaj9xm3TbD4B2uDlY9 2J1csHYPXUxV//FNCpHhFLCOjnnAZ2M3QV1rrqZJvgn9OogrE2TNbv4Urq6bSQX9MPMP 0VwQ== X-Received: by 10.194.75.198 with SMTP id e6mr15713081wjw.3.1390250437387; Mon, 20 Jan 2014 12:40:37 -0800 (PST) Original-Received: from bzg.localdomain (mar75-2-81-56-68-112.fbx.proxad.net. [81.56.68.112]) by mx.google.com with ESMTPSA id dm2sm4904552wib.8.2014.01.20.12.40.35 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 20 Jan 2014 12:40:36 -0800 (PST) Original-Received: by bzg.localdomain (Postfix, from userid 1000) id CF38F1C2074C; Mon, 20 Jan 2014 21:40:34 +0100 (CET) In-Reply-To: (Richard Stallman's message of "Mon, 20 Jan 2014 14:22:09 -0500") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.50 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2a00:1450:400c:c00::233 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:168802 Archived-At: Richard Stallman writes: > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > - twittering-mode uses CA certificates provided by Symantec here > https://www.symantec.com/page.jsp?id=roots > > Could you explain how twittering-mode relates to those certificates? I'm quoting Tadashi: According to https://dev.twitter.com/discussions/24239 , connections to api.twitter.com are now restricted to TLS/SSL connections only. CA certificates are required for verifying the server certificates and establishing SSL connection. Since SSL connection is established by an external program such as curl, wget, gnutls-cli or openssl, such a program refers to certificates. Therefore, an external program must be able to refer to valid certificates that can verify the Twitter server certificates. Of course, if a system has such certificates and an external program can refer to it, twittering-mode do not have to include certificates. I have embedded them for convenience of various platforms. > The first blocker is strong: using these certificates requires > the authors to sign Symantec Root Certificate license agreement, > which is not compatible with GPL: > > I don't follow this statement. Who exactly has to agree to that license? The developer who uses the certificates and redistribute them. > What effect does this have on users of twittering mode? None. > What effect does this have on redistributors of twittering mode? Developers have to agree with these restrictions: 3. RESTRICTIONS. You may not: (a) modify or create any derivative works of Root Certificates; (b) assign, sublicense, sell, rent, or lease Symantec's root keys or Root Certificates; (c) use such Root Certificates except as expressly permitted under this Agreement; (d) remove or alter any trademark, logo, copyright, or other proprietary notices, legends, symbols, or labels provided in the Root Certificates; or (e) certify, or cause a third party to certify, the public key contained in the Root Certificates by issuing or creating a Certificate containing such public key. The full license is here: https://www.symantec.com/content/en/us/about/media/repository/root-certificate-license-agreement.pdf > As for incompatibility with the GPL, is that issue relevant? The > certificate need not be covered by the GPL, and it is not software, > is it? Isn't it data? Yes, certificates are data. I've not read the Symantec license in its entirety, I just focused on some part and they read as not being free software friendly in general. I cannot judge in details. There is the possibility to use certificates from Mozilla : http://curl.haxx.se/ca/ I suggested the author to give it a try and see if it works. > Anyway, without understanding how the certificate relates to > the software, I can't tell what the issue is. I hope it's clearer now. -- Bastien