Re: convenient digital signing for el files and snippets

[Ted Zlatanov <tzz@lifelogs.com>]

On Wed, 09 Mar 2011 10:27:14 -0600 Joseph Gay <gilleylen@gmail.com> wrote: 

>> - older and legacy code doesn't have to be modified to be signed

JG> This wouldn't affect unsigned code. It would be treated the same as it
JG> is now. Only for things that are signed would there be any potential
JG> benefit (assurance that the signature is trusted and validated).

Right.  So what could make the hundreds of EmacsWiki contributors add
this extra code to their source?  And what benefit is it to the end
user?  EmacsWiki is already open to editing, so what prevents an
uploader from signing malicious code?

JG> I have some working code now, so I will look into what it would take to
JG> implement a mechanism for ELPA, assuming that's not already in the
JG> works.

I'm not aware of it; the TODO list is at the beginning of package.el.
If you write this I'll be glad to test it.

Ted