From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: Autoload from a web page? Date: Sat, 02 Jan 2010 10:45:34 -0500 Message-ID: References: Reply-To: rms@gnu.org NNTP-Posting-Host: lo.gmane.org Content-Type: text/plain; charset=ISO-8859-15 X-Trace: ger.gmane.org 1262447243 2442 80.91.229.12 (2 Jan 2010 15:47:23 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 2 Jan 2010 15:47:23 +0000 (UTC) Cc: emacs-devel@gnu.org To: Lennart Borgman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Jan 02 16:47:16 2010 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1NR6CB-0007YE-2B for ged-emacs-devel@m.gmane.org; Sat, 02 Jan 2010 16:47:15 +0100 Original-Received: from localhost ([127.0.0.1]:41376 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NR6CB-0003PN-Lc for ged-emacs-devel@m.gmane.org; Sat, 02 Jan 2010 10:47:15 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NR6Az-0002oC-Ha for emacs-devel@gnu.org; Sat, 02 Jan 2010 10:46:01 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NR6Ap-0002k3-Ah for emacs-devel@gnu.org; Sat, 02 Jan 2010 10:46:00 -0500 Original-Received: from [199.232.76.173] (port=56534 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NR6Ap-0002jx-5I for emacs-devel@gnu.org; Sat, 02 Jan 2010 10:45:51 -0500 Original-Received: from [140.186.70.10] (port=54598 helo=fencepost.gnu.org) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1NR6Ap-00027R-7S for emacs-devel@gnu.org; Sat, 02 Jan 2010 10:45:51 -0500 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.69) (envelope-from ) id 1NR6AY-0002Bz-9l; Sat, 02 Jan 2010 10:45:34 -0500 In-reply-to: (message from Lennart Borgman on Tue, 29 Dec 2009 06:29:48 +0100) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 3) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:119282 Archived-At: In this scenario the user wants to download a package, but he may not want all of it at once. It is just like autoloading locally, but with the difference that the files are loaded from the web (in a well defined manner). This difference is precisely the problem. Autoloading from files on disk gives you the chance to edit those files. Autoloading from a server means you can't do so. Yes, I understand that and I read about the problem with javascript. The same problems can not arise here since the user will be in control of where to download files from. Unlike the situation with javascript a single site (or a list of well defined sites) will be where the download comes from. I see your argument, that it is the user who decides to load from those files. But I'm not convinced this makes it ok, because it would be easy for programs to do this without the user's knowing about it. If we want to be safe, we need to tell users to watch out for this as a danger sign.