From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Jean Louis Newsgroups: gmane.emacs.devel Subject: Re: non-gnu elpa issue tracking Date: Tue, 15 Dec 2020 01:17:13 +0300 Message-ID: References: <20201214191055.fmhbp6xynbwyihrz@E15-2016.optimum.net> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="16497"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mutt/2.0 (3d08634) (2020-11-07) Cc: stefankangas@gmail.com, Richard Stallman , thibaut.verron@gmail.com, emacs-devel@gnu.org To: Boruch Baum Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon Dec 14 23:22:57 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kowF7-0004Ap-4y for ged-emacs-devel@m.gmane-mx.org; Mon, 14 Dec 2020 23:22:57 +0100 Original-Received: from localhost ([::1]:57824 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kowF6-0000j1-5g for ged-emacs-devel@m.gmane-mx.org; Mon, 14 Dec 2020 17:22:56 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:50568) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kowDu-0008C2-UO for emacs-devel@gnu.org; Mon, 14 Dec 2020 17:21:42 -0500 Original-Received: from stw1.rcdrun.com ([217.170.207.13]:47697) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kowDt-0005eX-5x; Mon, 14 Dec 2020 17:21:42 -0500 Original-Received: from localhost ([::ffff:197.157.34.185]) (AUTH: PLAIN securesender, TLS: TLS1.2,256bits,ECDHE_RSA_AES_256_GCM_SHA384) by stw1.rcdrun.com with ESMTPSA id 000000000001E529.000000005FD7E572.00007B46; Mon, 14 Dec 2020 15:21:37 -0700 Content-Disposition: inline In-Reply-To: <20201214191055.fmhbp6xynbwyihrz@E15-2016.optimum.net> Received-SPF: pass client-ip=217.170.207.13; envelope-from=bugs@gnu.support; helo=stw1.rcdrun.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:260836 Archived-At: * Boruch Baum [2020-12-14 22:14]: > On 2020-12-14 20:38, Jean Louis wrote: > > For sign up on Github users need to run proprietary Javascript. On the > > sign up page there are few Javascript scripts proprietary and few are > > free software. Maybe we could ask Github to liberate the remaining > > proprietary Javascript: > > 1) How can JS ever be considered 'free' (and benign) when it's pushed to > the client browser at run-time from an external server? Until it's > received (at page load time), no user can possibly know what its > contents truly are. > > 1.1) Even if a user had something like a set of HOSTS file entries > redirecting the HTTP requests for JS to a local repository, the > local JS repository would need to be kept up-to-date, BUT ... > > 1.2) Once a local repository exists, the JS being pushed no longer > needs to be 'free' because it won't be used anyway; All that's > required is API compatibility. > > 2) For me (IFF: I were to adopt your position re: github) your solution > sounds insufficient, because it wouldn't impose upon github a legal > commitment not to inject proprietary JS in the future. It is up to them to decide on that, there is nothing wrong to ask. We cannot impose any legal commitment on third parties. Best is when entities like Github commit voluntarily. Even then there is no legal commitment. It is hypocrisy that they host free software but coerce users to run non-free software for login. Jean