From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: Win32 GnuTLS DLL installer? Date: Thu, 21 Sep 2017 11:38:01 -0400 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <87zi9ocbae.fsf@lifelogs.com> References: <87lgl9e4ji.fsf@lifelogs.com> <5e2a6b84f4051ba2d4d427200045c947.squirrel@cloud103.planethippo.com> <8760ccdt3g.fsf@lifelogs.com> <83mv5ods3n.fsf@gnu.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1506008306 29386 195.159.176.226 (21 Sep 2017 15:38:26 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Thu, 21 Sep 2017 15:38:26 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Sep 21 17:38:19 2017 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dv3YQ-0007At-Pl for ged-emacs-devel@m.gmane.org; Thu, 21 Sep 2017 17:38:18 +0200 Original-Received: from localhost ([::1]:54254 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dv3YY-0000ut-82 for ged-emacs-devel@m.gmane.org; Thu, 21 Sep 2017 11:38:26 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:42395) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dv3YP-0000uV-3g for emacs-devel@gnu.org; Thu, 21 Sep 2017 11:38:18 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dv3YL-00075n-1B for emacs-devel@gnu.org; Thu, 21 Sep 2017 11:38:17 -0400 Original-Received: from [195.159.176.226] (port=52895 helo=blaine.gmane.org) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dv3YK-00074Q-QT for emacs-devel@gnu.org; Thu, 21 Sep 2017 11:38:12 -0400 Original-Received: from list by blaine.gmane.org with local (Exim 4.84_2) (envelope-from ) id 1dv3Y9-0006MF-EQ for emacs-devel@gnu.org; Thu, 21 Sep 2017 17:38:01 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: emacs-devel@gnu.org Original-Lines: 34 Original-X-Complaints-To: usenet@blaine.gmane.org X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Cancel-Lock: sha1:r2QX+rS3YrxNGeCOQfBzL5vtWcE= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 195.159.176.226 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:218636 Archived-At: On Thu, 21 Sep 2017 17:49:32 +0300 Eli Zaretskii wrote: >> From: Ted Zlatanov >> Date: Thu, 21 Sep 2017 10:28:03 -0400 >> >> (A possible use case for the security-patches package/repo/mechanism >> could be to check the DLL version and notify the user if it's outdated. EZ> How do you define "outdated"? GnuTLS developers maintain 3 branches EZ> in parallel, and release versions from all the 3 branches. Which one EZ> should we follow, and does any N+1 release from that branch mean that EZ> the N release is considered "outdated" and should be replaced? That's usually the platform's responsibility, but in this case it seems up to us. I would keep up with the current branch (whatever was installed already) at least, on the principle of least surprise. EZ> Moreover, accommodating a new version of GnuTLS might mean changes to EZ> Emacs C and/or Lisp sources -- are we going to release patches to EZ> the core sources through ELPA or something? Theoretically the current branch will not require that. I would just post a non-intrusive message to the user for now. EZ> IOW, this sounds like a major undertaking on our part, and I'm sure EZ> more and more issues will pop up as we consider the implications. I'm EZ> not sure we want to become a de-facto "distro" for MS-Windows users, EZ> as I don't think we have the resources, even if we have the desire. Agreed, I wasn't suggesting all of that. It does seem like a general Emacs update process may be more appropriate, like Cygwin does, but simple messaging is a lot easier and less risky. Ted