From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.bugs Subject: bug#21382: [PATCH] Use HTTPS for package repo URLs Date: Thu, 05 Nov 2015 14:36:42 -0500 Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos Message-ID: <87mvus2q7p.fsf@lifelogs.com> References: <20150830195637.GH5380@akranes.dyndns.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1446752252 2000 80.91.229.3 (5 Nov 2015 19:37:32 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 5 Nov 2015 19:37:32 +0000 (UTC) Cc: 21382@debbugs.gnu.org, Francois Marier To: Glenn Morris Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu Nov 05 20:37:18 2015 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1ZuQLV-0003Na-8n for geb-bug-gnu-emacs@m.gmane.org; Thu, 05 Nov 2015 20:37:17 +0100 Original-Received: from localhost ([::1]:34945 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZuQLU-0004Qk-OA for geb-bug-gnu-emacs@m.gmane.org; Thu, 05 Nov 2015 14:37:16 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:42795) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZuQLL-0004J3-FB for bug-gnu-emacs@gnu.org; Thu, 05 Nov 2015 14:37:11 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZuQLG-0005MI-Df for bug-gnu-emacs@gnu.org; Thu, 05 Nov 2015 14:37:07 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:36047) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZuQLG-0005MB-Ad for bug-gnu-emacs@gnu.org; Thu, 05 Nov 2015 14:37:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1ZuQLG-0004T8-10 for bug-gnu-emacs@gnu.org; Thu, 05 Nov 2015 14:37:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Ted Zlatanov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 05 Nov 2015 19:37:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 21382 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch Original-Received: via spool by 21382-submit@debbugs.gnu.org id=B21382.144675220717155 (code B ref 21382); Thu, 05 Nov 2015 19:37:01 +0000 Original-Received: (at 21382) by debbugs.gnu.org; 5 Nov 2015 19:36:47 +0000 Original-Received: from localhost ([127.0.0.1]:54987 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZuQL0-0004Sd-Ru for submit@debbugs.gnu.org; Thu, 05 Nov 2015 14:36:47 -0500 Original-Received: from mail-yk0-f172.google.com ([209.85.160.172]:36716) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZuQKz-0004SV-0O for 21382@debbugs.gnu.org; Thu, 05 Nov 2015 14:36:45 -0500 Original-Received: by ykba4 with SMTP id a4so149887472ykb.3 for <21382@debbugs.gnu.org>; Thu, 05 Nov 2015 11:36:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version:content-type; bh=G2qN17pqZxxOASr8VvnRYIgecEkGzVS+IJTRZqqtGNY=; b=fvdA2gOJlLt1DYKdVhnaw6rNbbsNPPCs1ul1mnRhyx8+UbMxq3pNaD+UM3yzqYAq+y r6wgxLYsNbldQM4d0DWVY+EiJbaD4JKO166oAEiLivSvuJ+szD6NkfvQLOQFFDaguJ/M CWxPGUt/NnE4IxsPQ66MjugkXfnHRzuLD+Zu0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=G2qN17pqZxxOASr8VvnRYIgecEkGzVS+IJTRZqqtGNY=; b=DtKoMc/bap0ktH/15NHdO207XNJccX6C5jpyeATwvadKenTVuDUP5/a2x72lli5hGO mYPuN+NbmjqgNRJ4RBNcofe8bO9r8VuiCI4+FiEk0o9KqjNG0vGlEYxwjcflCAVU0BIN tYV+iZ/QtfWkSq6vraRwqliLjckgJdRSTixny2GqCQ717xxI5gLZrBYIJjqpE7CBFNFk IJDdBkwD55IAnqG+k6h9itgseFsUn+l8D5athYvbkQhPXL4JNi6ZTuw3E9P8IQ7uMRSX +UY90aBBq030SxvKqSA/gdklhY0Pe4J58ZRS7yz1k2qqAVnewqSnhvdG1wBjIupI63FU x2cQ== X-Gm-Message-State: ALoCoQmUv0Mu1V+LLQawAVfJu3b3dpMCQUVrLFgkeRdbjXhYONm4w+VQPJFqKI4kUSGZ67yHeXIL X-Received: by 10.31.49.213 with SMTP id x204mr8901991vkx.51.1446752204111; Thu, 05 Nov 2015 11:36:44 -0800 (PST) Original-Received: from flea ([98.229.60.157]) by smtp.gmail.com with ESMTPSA id g16sm5682407vke.11.2015.11.05.11.36.43 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 05 Nov 2015 11:36:43 -0800 (PST) X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes In-Reply-To: (Glenn Morris's message of "Mon, 31 Aug 2015 12:02:09 -0400") User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:108484 Archived-At: On Mon, 31 Aug 2015 12:02:09 -0400 Glenn Morris wrote: GM> Francois Marier wrote: >> In order to avoid having users pull emacs packages over HTTP (where they can >> be intercepted and modified by network attackers), ... >> I have changed the default URLs for the package repositories to use HTTPS. GM> Thanks for the patch, but more is needed than just unconditionally GM> changing http to https. See discussion in GM> http://lists.gnu.org/archive/html/emacs-devel/2015-05/msg00110.html Francois, would you be interested in leading the work on those items? I'll assist any way I can but I am unable to do it myself. Ted