From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Robert Pluim Newsgroups: gmane.emacs.help Subject: Re: Ubuntu 16.04 server --- Contacting host: elpa.gnu.org:80 when package-refresh-contents Date: Wed, 17 Jan 2018 15:41:16 +0100 Message-ID: <87shb4bl9v.fsf@gmail.com> References: <20180117121229.GB14008@tuxteam.de> <87po684l16.fsf@cgc-instruments.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Trace: blaine.gmane.org 1516200028 29961 195.159.176.226 (17 Jan 2018 14:40:28 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Wed, 17 Jan 2018 14:40:28 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.91 (gnu/linux) Cc: help-gnu-emacs@gnu.org To: Dan =?utf-8?B?xIxlcm3DoWs=?= Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Wed Jan 17 15:40:24 2018 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eboss-0006rL-Od for geh-help-gnu-emacs@m.gmane.org; Wed, 17 Jan 2018 15:40:10 +0100 Original-Received: from localhost ([::1]:40419 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ebous-0001mj-Kj for geh-help-gnu-emacs@m.gmane.org; Wed, 17 Jan 2018 09:42:14 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:52875) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ebou4-0001jn-1K for help-gnu-emacs@gnu.org; Wed, 17 Jan 2018 09:41:24 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ebotz-0006q6-A1 for help-gnu-emacs@gnu.org; Wed, 17 Jan 2018 09:41:24 -0500 Original-Received: from mail-wm0-x235.google.com ([2a00:1450:400c:c09::235]:36568) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ebotz-0006pD-3K for help-gnu-emacs@gnu.org; Wed, 17 Jan 2018 09:41:19 -0500 Original-Received: by mail-wm0-x235.google.com with SMTP id f3so16279013wmc.1 for ; Wed, 17 Jan 2018 06:41:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:mail-copies-to:gmane-reply-to-list :date:in-reply-to:message-id:user-agent:mime-version :content-transfer-encoding; bh=iDH/9vcjxUvetz8JGMTlHb4KGvL40BEXEFM1nCJtoYk=; b=BaK7U94+rQaBqmlaBHwzJ8YvBGXQR4axTmuq0I6TuM/kDZKwXmHvjPLc36pMdt5fR2 jsXGKi/3JuGL4cDCTymCjnpdfrZtwUu92dmH+TK6jIqelWKg+EYZfybAdjgZZubJtt9U id5kvr4RtniyMjQgtBHMhOlcEXiXstiA4GEtFphNdOhCOggRdXopHhRSteNq0HMfDUmT ayXjkJTe/jHt8vf/0tzMhor9DlWMSTbDmZHdBKSVZVldvv1w9qbICUlgP2jbADNtTxsu Brpa5xmb0V7+RDgUw9eaARDxeGNp4P/og2e/D/PAKeU8ww9pX2pvBIcSLek+aApeOdGT cNew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version:content-transfer-encoding; bh=iDH/9vcjxUvetz8JGMTlHb4KGvL40BEXEFM1nCJtoYk=; b=I+DLNi1oruJ8fSFdriv7EW45lDwvC2FxKbzlaPMwb5tXGBGJ1h1dw/iJtgFMe54UIJ 4P4K2BjXI6L9OTtor7HZv+/kYrojE392YQ6I360dISNBFzi9T2tQFxZU/blxSOYum3Zj mcRjSbecGVp8rMnGbI/8FEcBGfQO35aFleSi3oiDe6esHczUDduwgYdqgzA4kCB74NCt KQPm5AzSQvflFQ6jnAqPZEymqp76mIcz+6VnxnuEdlz+d7+95lmWKYHtCCan0/bxunYS 0W9xaYKn4VGHr7Vsf94thgepifeOfKnrCwJ/vM1wupmNtcHepDDKZz6EpnxZtthwgQnL Pn8w== X-Gm-Message-State: AKwxytexfblFb1j8BOeFJUbcQSUaZasWfO0RMdf+xJJdBJlV5YhfetUB deJRu0zSyaARU9CksrOPqzPA7aSh X-Google-Smtp-Source: ACJfBov9GRGMvv6/eTveZ80rLr9+TZQkoQeEs33nQA7DdeRUwP01f4uvNNeGFB8n4aT+yU/ChKBNaQ== X-Received: by 10.28.110.3 with SMTP id j3mr2500096wmc.97.1516200077594; Wed, 17 Jan 2018 06:41:17 -0800 (PST) Original-Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id 44sm6906052wrv.0.2018.01.17.06.41.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 17 Jan 2018 06:41:16 -0800 (PST) Mail-Copies-To: never Gmane-Reply-To-List: yes In-Reply-To: <87po684l16.fsf@cgc-instruments.com> ("Dan \=\?utf-8\?B\?xIxlcm0\=\?\= \=\?utf-8\?B\?w6FrIidz\?\= message of "Wed, 17 Jan 2018 15:28:21 +0100") X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a00:1450:400c:c09::235 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:115761 Archived-At: Dan =C4=8Cerm=C3=A1k writes: > The tile sounds a little click-baity, but it is actually a good tutorial > how to secure the connection to (m)elpa. > > Afaik there has been no malware on melpa, but if you download your > packages via http, someone could in theory tamper with your connection > and inject malicious code. > > So, don't panic & use https ;-) The upcoming Emacs 26 should be much better in this regards, as it uses https by default for elpa downloads. Some of the advice in that blog entry is still useful though. Robert