From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: [RFE] Migration to gitlab Date: Fri, 22 Mar 2019 11:58:35 -0400 Message-ID: References: <1552789070.5272.1@yandex.ru> <1552821396.21432.0@yandex.ru> <83imwhwf4x.fsf@gnu.org> <837ecvux2q.fsf@gnu.org> <9c7cf558-a2d3-951e-d6e1-31b3ad5900cf@yandex.ru> <1553064994.13109.0@yandex.ru> <831s32t3fn.fsf@gnu.org> <87mulnxkik.fsf@mbork.pl> <83bm23rqua.fsf@gnu.org> <87sgvf9ejr.fsf@iki.fi> <83tvfvq7rf.fsf@gnu.org> <83mulmrkb4.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="183353"; mail-complaints-to="usenet@blaine.gmane.org" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: emacs-devel@gnu.org To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Mar 22 17:02:27 2019 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1h7Mcl-000lbA-4W for ged-emacs-devel@m.gmane.org; Fri, 22 Mar 2019 17:02:27 +0100 Original-Received: from localhost ([127.0.0.1]:59405 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h7Mck-0000Wg-25 for ged-emacs-devel@m.gmane.org; Fri, 22 Mar 2019 12:02:26 -0400 Original-Received: from eggs.gnu.org ([209.51.188.92]:36025) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h7MZ7-0006vS-BL for emacs-devel@gnu.org; Fri, 22 Mar 2019 11:58:42 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h7MZ5-0006s4-KW for emacs-devel@gnu.org; Fri, 22 Mar 2019 11:58:41 -0400 Original-Received: from mail01.iro.umontreal.ca ([132.204.25.201]:48654) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h7MZ3-0006oD-T4 for emacs-devel@gnu.org; Fri, 22 Mar 2019 11:58:38 -0400 Original-Received: from mail01.iro.umontreal.ca (mail01.iro.umontreal.ca [127.0.0.1]) by mail01.iro.umontreal.ca (Postfix) with ESMTP id 3B7EA8146213 for ; Fri, 22 Mar 2019 11:58:37 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=iro.umontreal.ca; h=content-type:content-type:mime-version:user-agent:in-reply-to :date:date:references:message-id:subject:subject:to:from:from; s=dkim; t=1553270316; x=1554134317; bh=RKPBl2fUq/PJs30IE2gTIk8w rYOmhe15wzjdtg1gb/I=; b=Hb1HNVpEHrSwEDNk5jnY0IpS7Nzqnm2UXErlkQMp roYcK2rbc2xqVTnXi+sJLiD1Ohqa97sgPx5RO8jjZKTwtDmwdIaU30R4nTXrZ9sW PJgOP9ip+Hyb6m5ARZzOVkwLp+fo4aToLtO/kJRxWi0r4WgXA2/a+aWIdRE5eOAM 0OAcdEpER3r5+6AJrWBiFSp6K0nMHQjPeQ2Hvzw7BZ5aear+atyedPMoroH+m0Nx OYktrFn6PCTFF1LnxmLMQ/gd+uklFlSSfSG0Wx+elCX6ed45Vq3BUpOB1/6r1P5/ vTBYPjvO4wPV/IOdlAKI7IsT4kT5SeqU2NaZ31ys2e+FuA== X-Virus-Scanned: amavisd-new at iro.umontreal.ca Original-Received: from mail01.iro.umontreal.ca ([127.0.0.1]) by mail01.iro.umontreal.ca (mail01.iro.umontreal.ca [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3E7NsQmu1OaO for ; Fri, 22 Mar 2019 11:58:36 -0400 (EDT) Original-Received: from pastel (75-119-242-252.dsl.teksavvy.com [75.119.242.252]) by mail01.iro.umontreal.ca (Postfix) with ESMTPSA id 75A0881461FC; Fri, 22 Mar 2019 11:58:36 -0400 (EDT) In-Reply-To: <83mulmrkb4.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 22 Mar 2019 17:38:23 +0200") X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 132.204.25.201 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:234594 Archived-At: >> I expect it's safer to "git fetch + git diff" from a random machine out >> there than it is to have your MUA process a random email from >> a random person. > Really? Doesn't the mail server from which I fetch email do something > to protect me? It probably runs some anti-virus scanner. If you believe in anti-virus scanners, then maybe you'll count that as improving your security a bit. But it's not like Git doesn't do its due diligence in sanity checking. And "git diff" can't generate a malware attachment (it can spew junk but that should be no more harmful than if it were attached to an email). It's not like I completely trust in Git's C code, but since that same code is used by many Git servers, I think it's likely that it's been reasonably scrutinized and is at least as safe as your MUA (probably safer than any Elisp MUA). Stefan