From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Nicolas Petton Newsgroups: gmane.emacs.devel Subject: Re: [ANNOUNCE] Emacs 25.3 released Date: Wed, 13 Sep 2017 09:40:23 +0200 Message-ID: <87tw07rqqg.fsf@petton.fr> References: <87wp55t0un.fsf@petton.fr> <87r2vctasb.fsf@petton.fr> <87mv60t6sk.fsf@petton.fr> <837ex4q6uy.fsf@gnu.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Trace: blaine.gmane.org 1505288477 30200 195.159.176.226 (13 Sep 2017 07:41:17 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Wed, 13 Sep 2017 07:41:17 +0000 (UTC) Cc: rostislav.svoboda@gmail.com, emacs-devel@gnu.org To: Andreas Schwab , Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Sep 13 09:41:13 2017 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ds2IJ-0007di-QW for ged-emacs-devel@m.gmane.org; Wed, 13 Sep 2017 09:41:11 +0200 Original-Received: from localhost ([::1]:40629 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ds2IQ-0004bP-Kw for ged-emacs-devel@m.gmane.org; Wed, 13 Sep 2017 03:41:18 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:36069) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ds2Hl-0004b8-57 for emacs-devel@gnu.org; Wed, 13 Sep 2017 03:40:43 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ds2Hk-0001Ma-DR for emacs-devel@gnu.org; Wed, 13 Sep 2017 03:40:37 -0400 Original-Received: from petton.fr ([2a00:5884:8368::1]:42196) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ds2Hi-0001GF-RW; Wed, 13 Sep 2017 03:40:35 -0400 In-Reply-To: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=petton.fr; s=mail; t=1505288431; bh=PURMJq3wwd/0TPKaMJOb252MZahZvWs0E+Oz1XZdEiQ=; h=From:To:Cc:Subject:In-Reply-To:References:Date:Message-ID:MIME-Version:Content-Type; b=DL74NrxICd4QSbIy6W2yuG6bydpmfPVxRd1/Xe/X13clNK0xLz2i0LpQ5QCWbYZ7+VgzvAq9v2LC46VhXOzjxWBFL32QlgvO+vViaG+DSfKX9/tzqrdazxixycIuUTk2piirSLFbs0YdJZU5loM16TuLjyMqt4ISmKgj01eCB0M= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a00:5884:8368::1 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:218173 Archived-At: --=-=-= Content-Type: text/plain Andreas Schwab writes: > It's all about trust. And especially in the context of security, trust > is the most important thing. First, if I'm not being trusted with the release tarballs, somebody else can build them next time. Second, you can easily diff the emacs-25.3 tarball against emacs-25.2. Even if I did create a branch and tag before publishing the tarball, you'd have no guarantee that the tarball actually contains the content of the git commit. Diffing is the only way for you to see the actual changes. Nico --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEKNO+2FH986tX/vk8IzWHpHwgeRAFAlm44OcACgkQIzWHpHwg eRAuVAgAk3zEv46gZYjBhBlu38kcfM14rDkfyG7kfq6nMsqn7R0icEf5p5qutzda EP1o1ejMWGQ6PI/TcbX8reloIlLqAabOBqNDiAg7U+KXAZWVSdRETDRwxlnF/J1/ 8EG86W4CxMsTDFAIgt7icat2jcy8YghTeO3mtAXXS5WDyf7zzUpBMHNu1soWd7sW QKeby09VvsgbmPFoTsHQOIUa+FuDLhG8781TudeirO9Vg/VMWquqKGPe6C7T+a6A KlaJsflHrdDwYHo+ZDj2aQxWL091st/HTqVICixnDtfTkSJ3I12dgKeoBeACsKqP nZ//cqLunZvUec0vkqjg+EUdNBU/3A== =dA5i -----END PGP SIGNATURE----- --=-=-=--