From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: Integrating package.el Date: Wed, 06 Jan 2010 15:49:05 -0600 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <873a2iaoq6.fsf@lifelogs.com> References: <87d41rn3wt.fsf_-_@hagelb.org> <87k4vxiwlj.fsf@lifelogs.com> <878wcdjg9r.fsf@hagelb.org> <87637gh73j.fsf@lifelogs.com> <87pr5ocnl8.fsf@lifelogs.com> <201bac3a1001051550o616a4877rbb395931a1cac6b4@mail.gmail.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Trace: ger.gmane.org 1262814599 13555 80.91.229.12 (6 Jan 2010 21:49:59 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 6 Jan 2010 21:49:59 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Jan 06 22:49:51 2010 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1NSdlE-0008PL-32 for ged-emacs-devel@m.gmane.org; Wed, 06 Jan 2010 22:49:48 +0100 Original-Received: from localhost ([127.0.0.1]:55802 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NSdlE-0002W6-FK for ged-emacs-devel@m.gmane.org; Wed, 06 Jan 2010 16:49:48 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NSdl7-0002U5-TU for emacs-devel@gnu.org; Wed, 06 Jan 2010 16:49:41 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NSdl3-0002QF-AO for emacs-devel@gnu.org; Wed, 06 Jan 2010 16:49:41 -0500 Original-Received: from [199.232.76.173] (port=43147 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NSdl3-0002Q4-1q for emacs-devel@gnu.org; Wed, 06 Jan 2010 16:49:37 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]:49027) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1NSdl2-0005Fp-EN for emacs-devel@gnu.org; Wed, 06 Jan 2010 16:49:36 -0500 Original-Received: from list by lo.gmane.org with local (Exim 4.50) id 1NSdkt-0008Fv-BM for emacs-devel@gnu.org; Wed, 06 Jan 2010 22:49:27 +0100 Original-Received: from 38.98.147.130 ([38.98.147.130]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 06 Jan 2010 22:49:27 +0100 Original-Received: from tzz by 38.98.147.130 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 06 Jan 2010 22:49:27 +0100 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 24 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 38.98.147.130 X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.1.90 (gnu/linux) Cancel-Lock: sha1:g9MVNygP5z5pMCUMqieSk4SdrtE= X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 3) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:119551 Archived-At: On Wed, 06 Jan 2010 15:45:37 -0500 Richard Stallman wrote: >> The package repositories should be identified by a single URL; the ones >> that come with Emacs should point to a secure Savannah URL.  That may >> address RMS' concerns about loading software over the network.   RS> Alas that doesn't affect the issue. Running software directly from RS> the network is bad because it is a process that invites users to give RS> up control. RS> Who wrote the program makes no difference, not for this. RS> Where the program comes from makes no difference. RS> Suppose I wrote the program and people fetch it from gnu.org: RS> that makes no difference. It is still bad for people to RS> adopt a practice that gives them less control. RS> So we won't lead people in that direction. Sorry for confusing the issue between the package.el discussion and Lennart's discussion. I was talking about installing software, not running it directly from the repository. I would expect packages to be signed by the package repository maintainer as well, ensuring integrity. Ted