From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id uPgzJQLD/F5iNQAA0tVLHw (envelope-from ) for ; Wed, 01 Jul 2020 17:08:18 +0000 Received: from aspmx2.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id 6C4YIQLD/F5DXgAA1q6Kng (envelope-from ) for ; Wed, 01 Jul 2020 17:08:18 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx2.migadu.com (Postfix) with ESMTPS id 15D36680603 for ; Wed, 1 Jul 2020 17:08:17 +0000 (UTC) Received: from localhost ([::1]:40884 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jqgBU-0000Pe-Qi for larch@yhetil.org; Wed, 01 Jul 2020 13:06:08 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:54376) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jqgBO-0000LR-OF for guix-patches@gnu.org; Wed, 01 Jul 2020 13:06:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:42175) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jqgBO-0007n4-F3 for guix-patches@gnu.org; Wed, 01 Jul 2020 13:06:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jqgBO-00079l-9l for guix-patches@gnu.org; Wed, 01 Jul 2020 13:06:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#42048] [PATCH 6/6] services: provenance: Save channel introductions. Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 01 Jul 2020 17:06:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42048 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: zimoun Cc: Ricardo Wurmus , 42048@debbugs.gnu.org Received: via spool by 42048-submit@debbugs.gnu.org id=B42048.159362313027466 (code B ref 42048); Wed, 01 Jul 2020 17:06:02 +0000 Received: (at 42048) by debbugs.gnu.org; 1 Jul 2020 17:05:30 +0000 Received: from localhost ([127.0.0.1]:53721 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jqgAr-00078w-Or for submit@debbugs.gnu.org; Wed, 01 Jul 2020 13:05:30 -0400 Received: from eggs.gnu.org ([209.51.188.92]:39928) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jqgAo-00078i-VM for 42048@debbugs.gnu.org; Wed, 01 Jul 2020 13:05:29 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:42633) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jqgAj-0007dU-GX; Wed, 01 Jul 2020 13:05:21 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=56814 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1jqgAh-0006k0-7H; Wed, 01 Jul 2020 13:05:20 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <20200625211605.29316-1-ludo@gnu.org> <20200625211605.29316-6-ludo@gnu.org> <87v9j8mtx9.fsf@elephly.net> <87imf847sr.fsf@gnu.org> <86lfk3aa9p.fsf@gmail.com> <87r1tvzb6s.fsf@gnu.org> <86d05f9z94.fsf@gmail.com> Date: Wed, 01 Jul 2020 19:05:17 +0200 In-Reply-To: <86d05f9z94.fsf@gmail.com> (zimoun's message of "Wed, 01 Jul 2020 14:49:11 +0200") Message-ID: <87wo3nxj1u.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -3.3 (---) X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Scanner: scn0 Authentication-Results: aspmx2.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx2.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Spam-Score: -1.01 X-TUID: 5rSsK3HDXuKQ zimoun skribis: > On Wed, 01 Jul 2020 at 14:12, Ludovic Court=C3=A8s wrote: [...] >> I=E2=80=99m talking about the warning that says =E2=80=9Cthis channel is >> unauthenticated=E2=80=9D, which is mostly orthogonal to the discussion a= t hand. >> The reason I said it=E2=80=99s perhaps too early to enable it is that pe= ople >> haven=E2=80=99t had a chance to make their channel =E2=80=9Cauthenticabl= e=E2=80=9D yet. To be clear, I=E2=80=99m referring to this: https://git.savannah.gnu.org/cgit/guix.git/tree/guix/channels.scm?id=3D9f= 5f3932debc72a57a830fc6ca5ab980f6db4941#n406 > Well, the possible scenarii are: when pulling guix-bimsb which ends up > to pull guix-past: > > 1- unauthenticated guix-bimsb and unauthenticated guix-past > 2- authenticated guix-bimsb and unauthenticated guix-past > 3- unauthenticated guix-bimsb and authenticated guix-past > 4- authenticated guix-bimsb and authenticated guix-past > > The #1 and #4 do not deserve a warning. > The point #3 neither and even the authentication of guix-past should be > turned off, at least now. > > The point #2 requires a warning. Because if I am pulling a > authenticated channel, I expect that all the code it pulls is > authenticated which will not be the case, so IMHO it deserves a > warning. > > Then it is up to the guix-bimsb channel to add an introduction for the > dependency using the format you described. Exactly. I agree that #2 is problematic, but if the authors of guix-bimsb are aware that guix-past can also be authenticated, then I think it=E2=80=99s their responsibility to update their =E2=80=98.guix-chan= nel=E2=80=99 dependencies accordingly. Ludo=E2=80=99.