From: Dmitry Gutov <dgutov@yandex.ru>
To: Stefan Monnier <monnier@iro.umontreal.ca>,
Daniel Sutton <dan@dpsutton.com>
Cc: emacs-devel@gnu.org
Subject: Re: cannot download packages from elpa
Date: Thu, 3 Oct 2019 17:19:18 +0300 [thread overview]
Message-ID: <f7096eaf-b0ca-fd8a-7487-dba80581cdf5@yandex.ru> (raw)
In-Reply-To: <jwvzhiiwq5b.fsf-monnier+emacs@gnu.org>
On 03.10.2019 4:55, Stefan Monnier wrote:
> If you use an older Emacs to fetch the packages you need to first update
> the keys or disable signature checking.
I wonder: if we served ELPA over HTTPS only, would the signature
checking really add any tangible security benefit?
To continue that train of thought, if the only key we had to worry in
that respect is the HTTP certificate, the older releases of Emacs would
need no updates over time (aside from changing the repo url to https://
once).
next prev parent reply other threads:[~2019-10-03 14:19 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-10-03 0:44 cannot download packages from elpa Daniel Sutton
2019-10-03 1:55 ` Stefan Monnier
2019-10-03 2:17 ` Daniel Sutton
2019-10-03 14:19 ` Dmitry Gutov [this message]
2019-10-03 3:13 ` dick.r.chiang
2019-10-03 13:16 ` Stefan Monnier
2019-10-03 13:41 ` dick.r.chiang
2019-10-03 14:06 ` Stefan Monnier
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=f7096eaf-b0ca-fd8a-7487-dba80581cdf5@yandex.ru \
--to=dgutov@yandex.ru \
--cc=dan@dpsutton.com \
--cc=emacs-devel@gnu.org \
--cc=monnier@iro.umontreal.ca \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).