From: Thomas Lord <lord@emf.net>
To: Tom Tromey <tromey@redhat.com>
Cc: Stephen Eilert <spedrosa@gmail.com>, emacs-devel@gnu.org
Subject: Re: Emacs Package Management
Date: Mon, 11 Aug 2008 21:10:28 -0700 [thread overview]
Message-ID: <48A10D34.5050601@emf.net> (raw)
In-Reply-To: <m3ej58xryk.fsf@fleche.redhat.com>
Tom Tromey wrote:
> There was a discussion a while ago on this list. RMS wanted to
> restrict the available packages to those which had been assigned to
> the FSF, but I did not agree with that.
>
Please consider making the package system such that packages are
signed and users consciously pick and choose among authorities (i.e.,
which package signatures to trust).
To an extent, that makes the problem harder: a key management
system has to be part of the package system if "average" users are
expected to be able to use it.
On the other hand, it creates an economic market -- especially if
you keep that in mind while designing the package system. That is,
a new possible commercial service (entirely free-software friendly)
is to let people subscribe to a source of trusted emacs packages.
Providers of this service can differentiate and compete in lots of ways.
I think a worthy goal is to design a package system that helps
such a market flourish.
Firefox has a feature that illustrates a nice and relevant paradigm:
It frequently "calls home" to find out if a new upgrade has been
published and then automates the process of installing upgrades.
Emacs and the possible marketplace for emacs package providers
could benefit from a similar infrastructure. It is hard to get right,
of course: very easy to introduce vulnerabilities through design or
coding mistakes. Nevertheless, if it *is* gotten right, it helps to create
that marketplace.
In other threads about DOS and Windows support, people were
talking about the ideal of never having to earn a living in the proprietary
software world. It seems to me that the most direct way to make that
possible is to collectively concentrate on software systems that create
markets for free software developer talent (by virtue of the architecture
of those systems).
Package systems are exactly the right place to hack markets to create
free software jobs. RHAT and Canonical both discovered this a ways
back. An industry standard here, a really solid one, would crank up
competition
and generally "lubricate" the free software economy (by lowering the
barrier to entering the market as a package-by-subscription provider while
still preserving the opportunity for package providers to differentiate and
add value between upstream and the user). It is not something that those
companies are likely to be eager for until it becomes inevitable.
Therefore
it might well be a good strategic investment for volunteers.
One final technical note: In designing the package system it is
desirable not only to allow competing package provider services,
but also (reflecting the reality of software development) to afford
composing providers into "pipelines". That is, the package system
should model the concept of an upstream developer giving code to
downstream service providers who in turn give code (possibly patched)
to end users. An end-user package download transaction should be able
to report the "heritage" of the package to that level. The reason for
this is to create the possibility of a market for "royalties" paid to
upstream
developers -- that is, to create a funding pipeline for free software R&D.
-t
next prev parent reply other threads:[~2008-08-12 4:10 UTC|newest]
Thread overview: 65+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-08-01 21:27 Emacs Package Management Stephen Eilert
2008-08-01 22:58 ` Tom Tromey
2008-08-01 23:14 ` Phil Hagelberg
2008-08-01 23:25 ` Lennart Borgman (gmail)
2008-08-02 0:13 ` Tom Tromey
2008-08-03 1:33 ` Richard M. Stallman
2008-08-03 18:03 ` Stefan Monnier
2008-08-04 15:33 ` Richard M. Stallman
2008-08-04 19:07 ` Stefan Monnier
2008-08-05 8:04 ` Richard M. Stallman
2008-08-05 13:09 ` Stephen Eilert
2008-08-05 14:39 ` Paul R
2008-08-06 3:35 ` Richard M. Stallman
2009-09-16 22:36 ` Stephen Eilert
2009-09-17 1:44 ` Tom Tromey
2009-09-17 13:43 ` Stefan Monnier
2009-09-17 14:26 ` Tom Tromey
2009-09-17 14:58 ` Eric M. Ludlam
2009-09-28 21:13 ` Phil Hagelberg
2009-09-28 21:48 ` Lennart Borgman
2009-09-28 21:54 ` Chong Yidong
2009-09-28 22:30 ` Phil Hagelberg
2009-09-29 11:31 ` Richard Stallman
2009-09-29 19:18 ` Stefan Monnier
2009-09-29 19:41 ` Tom Tromey
2009-09-30 1:20 ` Stefan Monnier
2009-09-30 2:07 ` Tom Tromey
2009-09-30 4:39 ` Stefan Monnier
2009-09-30 20:18 ` Tom Tromey
2009-10-01 5:01 ` Stefan Monnier
2008-08-02 1:58 ` Stephen Eilert
2008-08-02 3:36 ` Tom Tromey
2008-08-02 17:30 ` Richard M Stallman
2008-08-12 4:10 ` Thomas Lord [this message]
2009-09-12 22:38 ` Phil Hagelberg
2009-09-12 23:30 ` Eric M. Ludlam
2009-09-13 16:40 ` Richard Stallman
2009-09-14 9:07 ` joakim
2009-09-14 9:26 ` David Kastrup
2009-09-15 7:16 ` Richard Stallman
2009-09-15 8:30 ` Miles Bader
2009-09-15 18:15 ` Richard Stallman
2009-09-15 18:58 ` Tom Tromey
2009-09-15 22:08 ` Miles Bader
2009-09-16 15:16 ` Richard Stallman
2009-09-16 18:41 ` Stefan Monnier
2009-09-17 1:05 ` Geoff Gole
2009-09-17 19:50 ` Richard Stallman
2009-09-15 18:55 ` Tom Tromey
2009-09-17 6:37 ` Richard Stallman
2009-09-17 8:28 ` Tassilo Horn
2009-09-17 8:37 ` joakim
2009-09-17 8:48 ` Lennart Borgman
2009-09-17 9:31 ` Tassilo Horn
2009-09-17 10:43 ` Lennart Borgman
2009-09-17 11:50 ` Rupert Swarbrick
2009-09-19 2:40 ` Bob Rogers
2009-09-19 12:10 ` Rupert Swarbrick
2009-09-17 14:24 ` Tom Tromey
2009-09-17 19:22 ` Tassilo Horn
2009-09-17 15:04 ` Eric M. Ludlam
2009-09-17 13:46 ` Stefan Monnier
2009-09-17 14:21 ` Tom Tromey
2009-09-13 17:00 ` Eric Schulte
2008-08-02 14:46 ` Paul R
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=48A10D34.5050601@emf.net \
--to=lord@emf.net \
--cc=emacs-devel@gnu.org \
--cc=spedrosa@gmail.com \
--cc=tromey@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.