all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* bug#21238: ELPA not available over TLS
@ 2015-08-11 23:38 Glyph
  2015-08-12  2:25 ` Stefan Monnier
  0 siblings, 1 reply; 4+ messages in thread
From: Glyph @ 2015-08-11 23:38 UTC (permalink / raw)
  To: 21238

[-- Attachment #1: Type: text/plain, Size: 321 bytes --]

Even if packages were signed and I could verify all of them, I still don't think it's the NSA's business which packages I've requested from ELPA.  It would be nice if ELPA were available over TLS to provide both an additional level of security, and to provide an interim solution while we are waiting for package signing.

[-- Attachment #2: Type: text/html, Size: 560 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* bug#21238: ELPA not available over TLS
  2015-08-11 23:38 bug#21238: ELPA not available over TLS Glyph
@ 2015-08-12  2:25 ` Stefan Monnier
  2015-08-12 17:22   ` Glyph
  0 siblings, 1 reply; 4+ messages in thread
From: Stefan Monnier @ 2015-08-12  2:25 UTC (permalink / raw)
  To: Glyph; +Cc: 21238

> Even if packages were signed and I could verify all of them, I still don't
> think it's the NSA's business which packages I've requested from ELPA.
> It would be nice if ELPA were available over TLS to provide both an
> additional level of security,

AFAIK you can already use "https://..." addresses.  This should work for
the GNU ELPA server, at least.

> and to provide an interim solution while we are waiting for
> package signing.

All GNU ELPA packages are signed and Emacs-24.5 does check them if you
have GPG installed.


        Stefan





^ permalink raw reply	[flat|nested] 4+ messages in thread

* bug#21238: ELPA not available over TLS
  2015-08-12  2:25 ` Stefan Monnier
@ 2015-08-12 17:22   ` Glyph
  2015-08-13  0:39     ` Xue Fuqiao
  0 siblings, 1 reply; 4+ messages in thread
From: Glyph @ 2015-08-12 17:22 UTC (permalink / raw)
  To: Stefan Monnier; +Cc: 21238

[-- Attachment #1: Type: text/plain, Size: 1007 bytes --]


> On Aug 11, 2015, at 7:25 PM, Stefan Monnier <monnier@iro.umontreal.ca> wrote:
> 
>> Even if packages were signed and I could verify all of them, I still don't
>> think it's the NSA's business which packages I've requested from ELPA.
>> It would be nice if ELPA were available over TLS to provide both an
>> additional level of security,
> 
> AFAIK you can already use "https://..." addresses.  This should work for
> the GNU ELPA server, at least.

Okay, I was sure I'd hit https://elpa.gnu.org and it was a connection error before I posted this bug.  I just did again and it worked, so... I must have been in error.

>> and to provide an interim solution while we are waiting for
>> package signing.
> 
> All GNU ELPA packages are signed and Emacs-24.5 does check them if you
> have GPG installed.

Thanks also for this bit of information.  It should probably require that GPG be installed if package.el is to be used then, but that is a separate issue.

Sorry for the bogus report!

[-- Attachment #2: Type: text/html, Size: 1859 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* bug#21238: ELPA not available over TLS
  2015-08-12 17:22   ` Glyph
@ 2015-08-13  0:39     ` Xue Fuqiao
  0 siblings, 0 replies; 4+ messages in thread
From: Xue Fuqiao @ 2015-08-13  0:39 UTC (permalink / raw)
  To: 21238-done; +Cc: Glyph

On Thu, Aug 13, 2015 at 1:22 AM, Glyph <glyph@twistedmatrix.com> wrote:

> Okay, I was sure I'd hit https://elpa.gnu.org and it was a connection error
> before I posted this bug.  I just did again and it worked, so... I must have
> been in error.

You're not alone: https://github.com/syl20bnr/spacemacs/issues/2596

Closing.





^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2015-08-13  0:39 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-08-11 23:38 bug#21238: ELPA not available over TLS Glyph
2015-08-12  2:25 ` Stefan Monnier
2015-08-12 17:22   ` Glyph
2015-08-13  0:39     ` Xue Fuqiao

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.