From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Philippe Vaucher Newsgroups: gmane.emacs.devel Subject: Re: Drop the Copyright Assignment requirement for Emacs Date: Tue, 19 May 2020 08:16:25 +0200 Message-ID: References: <9mmFgzvrBwjt_n_VJyaJdXINraNi5HsGpwq-0MLeKiJA7kG2BQA4uywrzjyz7lpRS0OZDpjEi8lspOKYUA7P_QsODsDew_8nbH960G55fmY=@protonmail.com> <878silajdl.fsf@ericabrahamsen.net> <87tv18pyh4.fsf@russet.org.uk> <83zhaih0oz.fsf@gnu.org> <83pnbegsvm.fsf@gnu.org> <547c9116-c1c3-8563-4aee-c62aa2302861@yandex.ru> <838shybfdo.fsf@gnu.org> <3f79ff6e-2471-fa6d-08ff-682afd504eca@yandex.ru> <83v9l29yz3.fsf@gnu.org> <87o8qujs0p.fsf@randomsample> <83lfly9vvs.fsf@gnu.org> <835zd29rjb.fsf@gnu.org> <3c558381-f584-a2e5-972e-007221347f16@yandex.ru> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="107345"; mail-complaints-to="usenet@ciao.gmane.io" Cc: Richard Stallman , deng@randomsample.de, Emacs developers , Stefan Monnier , Dmitry Gutov , Eli Zaretskii , =?UTF-8?B?Sm/Do28gVMOhdm9yYQ==?= To: Yuri Khan Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Tue May 19 08:17:26 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1javZ7-000RnT-VX for ged-emacs-devel@m.gmane-mx.org; Tue, 19 May 2020 08:17:25 +0200 Original-Received: from localhost ([::1]:48616 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1javZ7-0000yf-2A for ged-emacs-devel@m.gmane-mx.org; Tue, 19 May 2020 02:17:25 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:39096) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1javYd-0000XV-KT for emacs-devel@gnu.org; Tue, 19 May 2020 02:16:55 -0400 Original-Received: from mail-lj1-x22b.google.com ([2a00:1450:4864:20::22b]:34939) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1javYc-0002Kb-5X; Tue, 19 May 2020 02:16:55 -0400 Original-Received: by mail-lj1-x22b.google.com with SMTP id g4so12400636ljl.2; Mon, 18 May 2020 23:16:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=H/yEyd6fIO7ArjbqvbTCA6HTIjsk4OjQzBDpcVYQpN0=; b=t4CeYZpx1ScwHCF/Il/XH9Awi7ok0hzpMgou/rzRv+6R74V9MV4YLxlaWSD0UHGBut 05CypbWhh4ooo1Vrg0oi1nVzlm3t0y0tc9DCnA/gIBp3dZ1zw/okc3GcBKjJKVReNaSV 5Rop4OqgH2kBpZtjqROgAkcXNcL1XvBec8M7lLaACx0akPqCGj/E6akz0ro8L4UZC/Dq EvGMt1H1HXOlNQAbykKfGd/qa+LYXEMrSoMQPYW2N/j/RNOF3EC7F+xQ/67enhTHdLge buckfzXwsSHObXlcJBfzL6vk4NuA11De/uEHTKq2dOuIRM30i82y/nFExZI9+zXcSr/m pTlA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=H/yEyd6fIO7ArjbqvbTCA6HTIjsk4OjQzBDpcVYQpN0=; b=PoavkXynYvsLgaHCctVLe0trhMK1N8xLgSYlRt9igpzFjQoB0KqyvVEu6RZiqqdEzD Yq/VYVhT/VF4zzT4irvmv1fus7LsjXro3rGtTWZSwfY7fm4RslfO6c4NBd0mt6vVKbOF dy8/ckRyQqB+svQlnieJ2QUoQGhtSYgC8cEzSH2AnczAptpSVOo1Ilg+rhumsWjHshr+ KpkR4WTcQDlRZTDFK6ErRgzd1TrB2UgRSiopcHPhE73NiAeYeR2UCylxHmD+iYJG7d9z ZNtsSBiYNGyC5Rt9JnR8az4QWZEK1FFhmSBJnrbi9ggtnlhylR8MYldIWj2yVl7VwpP1 YN3A== X-Gm-Message-State: AOAM533mkkmzLAML4C+S4sRkYHU3inV/AJFg+6druaeSnpgtlD4RitG6 D+p5kzG3b26UQGn3K8in9xgDwAh78wYIzehjJxM= X-Google-Smtp-Source: ABdhPJyC6pd3dGt4/12zbSpZstBJwY3nCHjcVXnFr3gd3pdaA7ho+IAhXk7q18fZkjyS8Y5tnyxdnqR6Kupts9sScyA= X-Received: by 2002:a2e:9f54:: with SMTP id v20mr6090691ljk.107.1589869011431; Mon, 18 May 2020 23:16:51 -0700 (PDT) In-Reply-To: Received-SPF: pass client-ip=2a00:1450:4864:20::22b; envelope-from=philippe.vaucher@gmail.com; helo=mail-lj1-x22b.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:250883 Archived-At: > > OK, that is very convenient for the signer, but how can the recipient > > of such a signed document verify this signature? If it is taken at > > face value, I can=E2=80=99t see anything that prevents an adversary fro= m > > typing your name and signing away some of your possessions. Just to enhance a little bit on that, from what I read on digital signatures what counts more is "the intent to sign" rather that the form. I am pretty sure that if Adobe Sign decide it's a valid way of signing they it probably is. > With hand-written signatures, the assumption is that your signature is > sufficiently complex that another person cannot duplicate it in a way > that a graphologist wouldn=E2=80=99t detect. I think that was the original intent but it's not really valid anymore. For example if there is a camera showing me signing a document but signing "John Smith" instead of my real name, I guess the signature would still be valid despite not being "verifiable" using the graphologist method. What counts more is being able to capture the "intent to sign". When doing this online, there are several ways to capture that intent (2-step identifications, confirmations, etc). > With GPG, the assumption is that > you control your private key and that it cannot be brute-forced in a > realistic time frame. Just to be clear I'm not against adding a little GPG dance, especially since it can help identify commits authors later on. Maybe that can even replace the "complicated" PDF display and make the print-scan-email cycle more simple, that'd already be an improvement. Philippe