From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Nic Ferrier Newsgroups: gmane.emacs.devel Subject: Re: package.el + DVCS for security and convenience Date: Mon, 24 Dec 2012 12:53:13 +0000 Message-ID: <87sj6v8vd2.fsf@ferrier.me.uk> References: <8738zf70ep.fsf@riseup.net> <871uejlbm1.fsf@lifelogs.com> <87obhmzl2f.fsf@bzg.ath.cx> <20121222141742.7494b429fe36e5ccef50cf6f@gmail.com> <87d2y2w9j5.fsf@uwakimon.sk.tsukuba.ac.jp> <87wqwas0gr.fsf@bzg.ath.cx> <87d2y2p6d7.fsf@bzg.ath.cx> <87sj6xg9p2.fsf_-_@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1356353614 7213 80.91.229.3 (24 Dec 2012 12:53:34 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 24 Dec 2012 12:53:34 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Dec 24 13:53:46 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Tn7XI-0001jX-V3 for ged-emacs-devel@m.gmane.org; Mon, 24 Dec 2012 13:53:41 +0100 Original-Received: from localhost ([::1]:40440 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tn7X5-0002QN-03 for ged-emacs-devel@m.gmane.org; Mon, 24 Dec 2012 07:53:27 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:38744) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tn7X0-0002QI-W8 for emacs-devel@gnu.org; Mon, 24 Dec 2012 07:53:25 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Tn7Wu-0007s9-DO for emacs-devel@gnu.org; Mon, 24 Dec 2012 07:53:22 -0500 Original-Received: from static.17.66.46.78.clients.your-server.de ([78.46.66.17]:39966 helo=po1.ferrier.me.uk) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tn7Wu-0007s0-6Y for emacs-devel@gnu.org; Mon, 24 Dec 2012 07:53:16 -0500 Original-Received: from nferrier (140.35.155.90.in-addr.arpa [90.155.35.140]) by po1.ferrier.me.uk (Postfix) with ESMTP id 753C6AC0498; Mon, 24 Dec 2012 13:55:27 +0100 (CET) Original-Received: from nferrier (localhost [127.0.0.1]) by nferrier (Postfix) with ESMTP id 3EF3F1600B7; Mon, 24 Dec 2012 12:53:13 +0000 (GMT) In-Reply-To: <87sj6xg9p2.fsf_-_@lifelogs.com> (Ted Zlatanov's message of "Sat, 22 Dec 2012 14:37:13 -0500") X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 78.46.66.17 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:155846 Archived-At: Ted Zlatanov writes: > I propose to require signatures for ELPA packages and make package.el > aware of signatures: Requiring signatures would be VERY bad at this stage because you would break all the repositories that people get code from that do not support signing. Instead some form of tainting should be supported.