From unknown Sat Aug 16 14:30:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#18144: Shouldn't the default package archive use HTTPS? Resent-From: Steven Stewart-Gallus Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 29 Jul 2014 11:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 18144 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 18144@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.140663211614183 (code B ref -1); Tue, 29 Jul 2014 11:09:02 +0000 Received: (at submit) by debbugs.gnu.org; 29 Jul 2014 11:08:36 +0000 Received: from localhost ([127.0.0.1]:41667 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XC5Gk-0003gg-OO for submit@debbugs.gnu.org; Tue, 29 Jul 2014 07:08:35 -0400 Received: from eggs.gnu.org ([208.118.235.92]:43130) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XByko-0001jz-Mu for submit@debbugs.gnu.org; Tue, 29 Jul 2014 00:11:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XBykc-0003Bv-Mt for submit@debbugs.gnu.org; Tue, 29 Jul 2014 00:11:05 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,T_MANY_HDRS_LCASE autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:54698) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XBykc-0003Br-Kc for submit@debbugs.gnu.org; Tue, 29 Jul 2014 00:10:58 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:44846) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XBykW-0003VT-Ep for bug-gnu-emacs@gnu.org; Tue, 29 Jul 2014 00:10:58 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XBykQ-0003BI-Hr for bug-gnu-emacs@gnu.org; Tue, 29 Jul 2014 00:10:52 -0400 Received: from message.mylangara.bc.ca ([142.35.159.25]:38424 helo=message.langara.bc.ca) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XBykQ-0003BE-Bu for bug-gnu-emacs@gnu.org; Tue, 29 Jul 2014 00:10:46 -0400 MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-disposition: inline Content-type: text/plain; charset=us-ascii Received: from langara.bc.ca ([127.0.0.1]) by message.langara.bc.ca (Sun Java(tm) System Messaging Server 6.3-6.03 (built Mar 14 2008; 32bit)) with ESMTP id <0N9G00970GXWRQ20@message.langara.bc.ca> for bug-gnu-emacs@gnu.org; Mon, 28 Jul 2014 21:10:44 -0700 (PDT) Received: from [173.180.212.56] by message.langara.bc.ca (mshttpd); Tue, 29 Jul 2014 04:10:44 +0000 (GMT) From: Steven Stewart-Gallus Message-id: Date: Tue, 29 Jul 2014 04:10:44 +0000 (GMT) X-Mailer: Sun Java(tm) System Messenger Express 6.3-6.03 (built Mar 14 2008; 32bit) Content-language: en X-Accept-Language: en Priority: normal X-detected-operating-system: by eggs.gnu.org: Solaris 10 X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -5.0 (-----) X-Mailman-Approved-At: Tue, 29 Jul 2014 07:08:32 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Hello, By default (in version 24.3.50.3) the value of package-archives is (quote (("gnu" . "http://elpa.gnu.org/packages/"))). Setting it to use HTTPS seems to work fine. I think it should be the default. Am I missing that Emacs has some other way of authenticating downloads and so HTTPS is not needed? Thank you, Steven Stewart-Gallus From unknown Sat Aug 16 14:30:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#18144: Shouldn't the default package archive use HTTPS? Resent-From: Glenn Morris Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 30 Jul 2014 00:05:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 18144 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Steven Stewart-Gallus Cc: 18144@debbugs.gnu.org Received: via spool by 18144-submit@debbugs.gnu.org id=B18144.14066786422132 (code B ref 18144); Wed, 30 Jul 2014 00:05:02 +0000 Received: (at 18144) by debbugs.gnu.org; 30 Jul 2014 00:04:02 +0000 Received: from localhost ([127.0.0.1]:42387 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XCHNB-0000YB-NP for submit@debbugs.gnu.org; Tue, 29 Jul 2014 20:04:02 -0400 Received: from fencepost.gnu.org ([208.118.235.10]:53766 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XCHN9-0000Y0-Ex for 18144@debbugs.gnu.org; Tue, 29 Jul 2014 20:03:59 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1XCHN8-0001OK-FP; Tue, 29 Jul 2014 20:03:58 -0400 From: Glenn Morris References: X-Spook: JFK Watergate Khaddafi doctrine Agfa Bush Wired S Key X-Ran: \OXF`Vb\`e3LH?~<@T\!z@d+ml[^UXx1_2`Zh:wq6gwuC#CVx@y6u1uUb|c*BD@hcs%AZj X-Hue: magenta X-Attribution: GM Date: Tue, 29 Jul 2014 20:03:58 -0400 In-Reply-To: (Steven Stewart-Gallus's message of "Tue, 29 Jul 2014 04:10:44 +0000 (GMT)") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Steven Stewart-Gallus wrote: > By default (in version 24.3.50.3) the value of package-archives is > (quote (("gnu" . "http://elpa.gnu.org/packages/"))). Setting it to use > HTTPS seems to work fine. I think it should be the default. See http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17625#51 > Am I missing that Emacs has some other way of authenticating downloads > and so HTTPS is not needed? It supposedly supports gpg signing, but it's never been properly tested AFAIK. I don't think this report adds anything that is not covered in http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17625, so I will close it. But thanks for the report. From debbugs-submit-bounces@debbugs.gnu.org Tue Jul 29 20:04:21 2014 Received: (at control) by debbugs.gnu.org; 30 Jul 2014 00:04:21 +0000 Received: from localhost ([127.0.0.1]:42390 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XCHNV-0000Z0-BM for submit@debbugs.gnu.org; Tue, 29 Jul 2014 20:04:21 -0400 Received: from fencepost.gnu.org ([208.118.235.10]:53770 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XCHNS-0000Ys-Q2 for control@debbugs.gnu.org; Tue, 29 Jul 2014 20:04:19 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1XCHNS-0001SQ-FX for control@debbugs.gnu.org; Tue, 29 Jul 2014 20:04:18 -0400 Date: Tue, 29 Jul 2014 20:04:18 -0400 Message-Id: Subject: control message for bug 18144 To: X-Mailer: mail (GNU Mailutils 2.1) From: Glenn Morris X-Spam-Score: -5.7 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.7 (-----) tag 18144 wontfix close 18144