From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: GNU ELPA security and Org-mode Date: Sun, 29 Apr 2018 22:15:04 -0400 Message-ID: References: <87vacbvarw.fsf@gnu.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1525054424 23269 195.159.176.226 (30 Apr 2018 02:13:44 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Mon, 30 Apr 2018 02:13:44 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: emacs-devel@gnu.org To: Bastien Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Apr 30 04:13:40 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fCyJv-0005wM-RC for ged-emacs-devel@m.gmane.org; Mon, 30 Apr 2018 04:13:39 +0200 Original-Received: from localhost ([::1]:57497 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fCyM0-0004M7-T9 for ged-emacs-devel@m.gmane.org; Sun, 29 Apr 2018 22:15:48 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:43429) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fCyLO-0004M1-2A for emacs-devel@gnu.org; Sun, 29 Apr 2018 22:15:10 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fCyLK-0005Pl-Tg for emacs-devel@gnu.org; Sun, 29 Apr 2018 22:15:10 -0400 Original-Received: from pruche.dit.umontreal.ca ([132.204.246.22]:54252) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fCyLK-0005PI-OE; Sun, 29 Apr 2018 22:15:06 -0400 Original-Received: from ceviche.home (lechon.iro.umontreal.ca [132.204.27.242]) by pruche.dit.umontreal.ca (8.14.7/8.14.1) with ESMTP id w3U2F5QD028772; Sun, 29 Apr 2018 22:15:05 -0400 Original-Received: by ceviche.home (Postfix, from userid 20848) id D1CE36613F; Sun, 29 Apr 2018 22:15:04 -0400 (EDT) In-Reply-To: <87vacbvarw.fsf@gnu.org> (Bastien's message of "Sat, 28 Apr 2018 13:19:15 +0200") X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 5 X-NAI-Spam-Score: 0 X-NAI-Spam-Rules: 2 Rules triggered EDT_SA_DN_PASS=0, RV6274=0 X-NAI-Spam-Version: 2.3.0.9418 : core <6274> : inlines <6596> : streams <1785486> : uri <2634086> X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 132.204.246.22 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:224972 Archived-At: >> So the org-mode package has weaker points: >> - uses http rather than https. > Just to mention that org is now available through https too: > ~$ git clone https://code.orgmode.org/bzg/org-mode.git We don't use the Git (currently), but yes, thanks for making an https version available. > Not sure if something remains to be done in this thread, but > if I can help let me know. Well, if the "list of tarballs" (at https://orgmode.org/elpa) could be kept in a Git branch instead, that would be great. Stefan