From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: joakim@verona.se Newsgroups: gmane.emacs.devel Subject: Re: Autoload from a web page? Date: Tue, 29 Dec 2009 03:45:38 +0100 Message-ID: References: NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Trace: ger.gmane.org 1262054770 23951 80.91.229.12 (29 Dec 2009 02:46:10 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 29 Dec 2009 02:46:10 +0000 (UTC) Cc: Tom Tromey , rms@gnu.org, emacs-devel@gnu.org To: Lennart Borgman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Dec 29 03:46:02 2009 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1NPS5w-00065y-Lx for ged-emacs-devel@m.gmane.org; Tue, 29 Dec 2009 03:46:00 +0100 Original-Received: from localhost ([127.0.0.1]:35725 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NPS5x-0005Jv-1B for ged-emacs-devel@m.gmane.org; Mon, 28 Dec 2009 21:46:01 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NPS5q-0005JN-M3 for emacs-devel@gnu.org; Mon, 28 Dec 2009 21:45:54 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NPS5m-0005HC-SX for emacs-devel@gnu.org; Mon, 28 Dec 2009 21:45:54 -0500 Original-Received: from [199.232.76.173] (port=56027 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NPS5m-0005H1-On for emacs-devel@gnu.org; Mon, 28 Dec 2009 21:45:50 -0500 Original-Received: from iwfs.imcode.com ([82.115.149.64]:43213 helo=gate.verona.se) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1NPS5j-0006oZ-DY; Mon, 28 Dec 2009 21:45:47 -0500 Original-Received: from localhost.localdomain (IDENT:1005@localhost [127.0.0.1]) by gate.verona.se (8.13.4/8.11.4) with ESMTP id nBT2jb83025280; Tue, 29 Dec 2009 03:45:39 +0100 In-Reply-To: (Lennart Borgman's message of "Mon, 28 Dec 2009 19:55:43 +0100") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.1.50 (gnu/linux) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.4-2.6 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:118909 Archived-At: Lennart Borgman writes: > On Mon, Dec 28, 2009 at 7:48 PM, Richard Stallman wrote: >> =A0 =A0But the risk is about doing this in an uncontrolled way. A lot of= sw >> =A0 =A0is updated in a similar way today (in a way that tries to control= the >> =A0 =A0risks). >> >> Just because it is common does not make it acceptable. >> >> We do not want software to be autoloaded from anywhere outside >> the user's machine. =A0The user should always have control over >> installing it in the machine. >> >> (See http://www.gnu.org/philosophy/javascript-trap.html> for a similar i= ssue.) > > > That is a totally different context than the one I am targetting. > > > My scenario is this: > > - You have group of related elisp files in a common place on the web. > - You download one of them, but it turns out that it does `require' or > autoload that supposes you have downloaded the other files too. Is this situation not handled well enough by Tom Tromeys package.el and ELPA? Especially if we move ahead with the plan to have ELPA:s backend be something like Savannah. > > In a situation like that it is possible to set up for autoloading > things by downloading them from the web without compromising security > (or at least not more than when you download a file yourself) since > you know which files will be downloaded. > > > Note: Of course this first assumes that you download one or two files > with the necessary information. > > --=20 Joakim Verona