From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: kensanata@gmail.com (Alex =?utf-8?Q?Schr=C3=B6der?=) Newsgroups: gmane.emacs.devel Subject: Re: ELPA policy Date: Thu, 12 Nov 2015 18:29:30 +0100 Message-ID: References: <87ziyuaqhl.fsf@petton.fr>> > <87lha5snji.fsf@isaac.fritz.box> > <87d1vhsmuj.fsf@isaac.fritz.box> > <878u65slue.fsf@isaac.fritz.box> > <874mgtsjwn.fsf@isaac.fritz.box> > <867flp8nb7.fsf@stephe-leake.org> <9e33129a-07d0-4abe-a94e-32d6d881519b@default> > <86bnb06g7g.fsf@stephe-leake.org>> > <86oaezemp9.fsf@stephe-leake.org> <65e5cfed-e7a0-4e55-973c-ca747f26467e@default> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1447351250 28135 80.91.229.3 (12 Nov 2015 18:00:50 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 12 Nov 2015 18:00:50 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Nov 12 19:00:43 2015 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1ZwwAo-0004ix-15 for ged-emacs-devel@m.gmane.org; Thu, 12 Nov 2015 19:00:38 +0100 Original-Received: from localhost ([::1]:48580 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZwwAn-0006ED-H0 for ged-emacs-devel@m.gmane.org; Thu, 12 Nov 2015 13:00:37 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:36217) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZwwAZ-0006E4-A8 for emacs-devel@gnu.org; Thu, 12 Nov 2015 13:00:24 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZwwAV-0002PK-B4 for emacs-devel@gnu.org; Thu, 12 Nov 2015 13:00:23 -0500 Original-Received: from plane.gmane.org ([80.91.229.3]:37758) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZwwAV-0002Ov-4h for emacs-devel@gnu.org; Thu, 12 Nov 2015 13:00:19 -0500 Original-Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1ZwwAG-0004A0-Ed for emacs-devel@gnu.org; Thu, 12 Nov 2015 19:00:04 +0100 Original-Received: from 77-57-27-11.dclient.hispeed.ch ([77.57.27.11]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 12 Nov 2015 19:00:04 +0100 Original-Received: from kensanata by 77-57-27-11.dclient.hispeed.ch with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 12 Nov 2015 19:00:04 +0100 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 17 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 77-57-27-11.dclient.hispeed.ch User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (darwin) Cancel-Lock: sha1:VBwzirs4PtMr/OwCVINnC1dJ/NA= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.229.3 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:194264 Archived-At: Drew Adams writes: > Again: "I post my code to Emacs Wiki (to locked pages)." > > But of course that doesn't mean it is uncrackable. Given that Emacs Wiki currently does not use HTTPS, we should consider Emacs Wiki insecure. Even then, the admin passwords are shared and there are no other efforts made to identify editors once they present the admin password. The current setup only protects against the simplest of threat models, e.g. spammers, vandals, well-meaning contributors that want to edit wiki pages instead of informing maintainers, and so on. I think that's the threat model wiki pages need to defend against, but I suspect that's not good enough for an inclusion into Emacs Core. -- Public Key Fingerprint = DF94 46EB 7B78 4638 7CCC 018B C78C A29B ACEC FEAE