From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: [PATCH] package.el: check tarball signature Date: Thu, 03 Oct 2013 11:01:43 -0400 Message-ID: References: <874n92x9em.fsf@flea.lifelogs.com> <87fvsk9m8b.fsf-ueno@gnu.org> <877gdutp1l.fsf@flea.lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1380913489 13521 80.91.229.3 (4 Oct 2013 19:04:49 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Fri, 4 Oct 2013 19:04:49 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Oct 04 21:04:52 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VSAgG-0003SF-34 for ged-emacs-devel@m.gmane.org; Fri, 04 Oct 2013 21:04:52 +0200 Original-Received: from localhost ([::1]:49218 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VSAgF-0006zH-MW for ged-emacs-devel@m.gmane.org; Fri, 04 Oct 2013 15:04:51 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:48682) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VSAg3-0006xc-WE for emacs-devel@gnu.org; Fri, 04 Oct 2013 15:04:47 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VSAfw-0001MO-Mr for emacs-devel@gnu.org; Fri, 04 Oct 2013 15:04:39 -0400 Original-Received: from chene.dit.umontreal.ca ([132.204.246.20]:46170) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VSAfw-0001M9-J7 for emacs-devel@gnu.org; Fri, 04 Oct 2013 15:04:32 -0400 Original-Received: from faina.iro.umontreal.ca (lechon.iro.umontreal.ca [132.204.27.242]) by chene.dit.umontreal.ca (8.14.1/8.14.1) with ESMTP id r94J4Tlb007820; Fri, 4 Oct 2013 15:04:32 -0400 Original-Received: by faina.iro.umontreal.ca (Postfix, from userid 20848) id D78B8B41FD; Thu, 3 Oct 2013 11:01:43 -0400 (EDT) In-Reply-To: <877gdutp1l.fsf@flea.lifelogs.com> (Ted Zlatanov's message of "Thu, 03 Oct 2013 10:19:34 -0400") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.50 (gnu/linux) X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 5 X-NAI-Spam-Score: 0 X-NAI-Spam-Rules: 1 Rules triggered RV4721=0 X-NAI-Spam-Version: 2.3.0.9362 : core <4721> : inlines <126> : streams <1050162> : uri <1555789> X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 132.204.246.20 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:163856 Archived-At: > +(defcustom package-check-signature 'allow-unsigned > + "Whether to check package signatures when installing." > + :type '(choice (const nil :tag "Never") > + (const allow-unsigned :tag "Allow unsigned") > + (const t :tag "Check always")) > + :risky t > + :group 'package > + :version "24.1") > IMHO this should be per archive, not global. WDYT? Actually, let's wait. If all turn out well, most/all ELPA archives will start providing signatures in the not too distant future and there'll be no need for per-archive settings (and we can change the default to t). Stefan