From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Thien-Thi Nguyen Newsgroups: gmane.emacs.help Subject: Re: no gnupg directory under elpa? Date: Wed, 28 May 2014 13:35:00 +0200 Message-ID: <87mwe2rva3.fsf@zigzag.favinet> References: <87tx8bsvp4.fsf@ericabrahamsen.net> <87r43es0wq.fsf@zigzag.favinet> <87iooqw7k6.fsf@ericabrahamsen.net> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" X-Trace: ger.gmane.org 1401276756 30386 80.91.229.3 (28 May 2014 11:32:36 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 28 May 2014 11:32:36 +0000 (UTC) To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Wed May 28 13:32:29 2014 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Wpc5s-0007gQ-RB for geh-help-gnu-emacs@m.gmane.org; Wed, 28 May 2014 13:32:28 +0200 Original-Received: from localhost ([::1]:41100 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Wpc5s-0004DD-EG for geh-help-gnu-emacs@m.gmane.org; Wed, 28 May 2014 07:32:28 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:57617) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Wpc5W-00042l-CR for help-gnu-emacs@gnu.org; Wed, 28 May 2014 07:32:12 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Wpc5P-00068o-15 for help-gnu-emacs@gnu.org; Wed, 28 May 2014 07:32:06 -0400 Original-Received: from smtp205.alice.it ([82.57.200.101]:56140) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Wpc5O-00066u-LG for help-gnu-emacs@gnu.org; Wed, 28 May 2014 07:31:58 -0400 Original-Received: from zigzag.favinet (95.232.71.99) by smtp205.alice.it (8.6.060.28) id 529A5931262DDC2B for help-gnu-emacs@gnu.org; Wed, 28 May 2014 13:31:57 +0200 Original-Received: from ttn by zigzag.favinet with local (Exim 4.80) (envelope-from ) id 1Wpc8c-0003Hj-IQ for help-gnu-emacs@gnu.org; Wed, 28 May 2014 13:35:18 +0200 Mail-Followup-To: help-gnu-emacs@gnu.org In-Reply-To: <87iooqw7k6.fsf@ericabrahamsen.net> (Eric Abrahamsen's message of "Wed, 28 May 2014 17:56:09 +0800") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4.50 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 82.57.200.101 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.help:97910 Archived-At: --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable () Eric Abrahamsen () Wed, 28 May 2014 17:56:09 +0800 > What do you see for packages installed from archives other than ELPA? All installed packages are red and unsigned, and have *nothing* in their archive column -- it's not just ELPA, it's also Melpa and Marmalade. [details] It sounds like the feature must still be implemented, everywhere. For ELPA (i don't know about the others), this would entail an additional stage for the release flow, at the least. It will not be enough for a package to simply bump its version number; the ELPA admin needs to sign either the package or the entire archive (IIUC package.el), as well. I wonder if I should just make a list of installed packages, hose the whole thing, and start over... I did that (w/ only two packages from ELPA) and saw no change, and suspect you won't, either. Hmm, i wonder where ELPA, Melpa, Marmalade, etc. admins/hackers hang out to discuss design and interop. IRC? As Emacs makes a nice root-kit platform, i hope security features for the package system(s) are high priority for them... am i being realistic? =2D-=20 Thien-Thi Nguyen GPG key: 4C807502 (if you're human and you know it) read my lisp: (responsep (questions 'technical) (not (via 'mailing-list))) =3D> nil --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlOFyesACgkQZwMiJEyAdQKpxwCg0+btSkaKFm6QP/yUmx7azXak CRUAoMSKBDJoMeAC3mD5nIo44lbgyhtj =MnSn -----END PGP SIGNATURE----- --=-=-=--