Re: In Support of ELPA

[Richard Stallman <rms@gnu.org>]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > SM> I find it is important for GNU ELPA not to *pull* from outside hosts
  > SM> that are not under our control.  Instead code should be pushed to it by
  > SM> people who have write access (hence take on the responsibility of paying
  > SM> attention to copyright and such).

  > Can GnuPG signatures satisfy that requirement so the code can be pulled?

The question is so vague that I can't relate it to the issue at hand.
GPG signatures delivered by whom, when, signing what, to achieve what
purpose?

But I am pretty sure the answer that GPG is irrelevant to this issue.
This is not about getting a signature (GPG signatures are usable in
the US and Italy), it is about a relationship with a person who we
trust to assure certain things are done right.


-- 
Dr Richard Stallman
President, Free Software Foundation (gnu.org, fsf.org)
Internet Hall-of-Famer (internethalloffame.org)
Skype: No way! See stallman.org/skype.html.