From unknown Sun Jun 22 00:54:07 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21382: [PATCH] Use HTTPS for package repo URLs Resent-From: Francois Marier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 31 Aug 2015 00:22:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 21382 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch To: 21382@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.144098050912248 (code B ref -1); Mon, 31 Aug 2015 00:22:01 +0000 Received: (at submit) by debbugs.gnu.org; 31 Aug 2015 00:21:49 +0000 Received: from localhost ([127.0.0.1]:43181 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZWCr4-0003BR-UY for submit@debbugs.gnu.org; Sun, 30 Aug 2015 20:21:48 -0400 Received: from eggs.gnu.org ([208.118.235.92]:34031) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZW8il-0004YS-Oa for submit@debbugs.gnu.org; Sun, 30 Aug 2015 15:56:57 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZW8ij-0000ay-Qx for submit@debbugs.gnu.org; Sun, 30 Aug 2015 15:56:55 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([208.118.235.17]:39397) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW8ij-0000au-NY for submit@debbugs.gnu.org; Sun, 30 Aug 2015 15:56:53 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:44027) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW8ii-0007GR-24 for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 15:56:53 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZW8ie-0000a1-PJ for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 15:56:52 -0400 Received: from mx01.mykolab.com ([95.128.36.1]:41621 helo=mx-out03.mykolab.com) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW8ie-0000Xw-Ej for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 15:56:48 -0400 X-Virus-Scanned: amavisd-new at kolabnow.com Received: from mx05.mykolab.com (mx05.mykolab.com [10.20.7.161]) by mx-out03.mykolab.com (Postfix) with ESMTPS id 1810021B28 for ; Sun, 30 Aug 2015 21:56:42 +0200 (CEST) Received: by akranes.dyndns.org (Postfix, from userid 1000) id 7077C4E083F; Sun, 30 Aug 2015 12:56:37 -0700 (PDT) Date: Sun, 30 Aug 2015 12:56:37 -0700 From: Francois Marier Message-ID: <20150830195637.GH5380@akranes.dyndns.org> Content-Type: multipart/mixed; boundary="wRRV7LY7NUeQGEoC" Content-Disposition: inline OpenPGP: id=8C470B2A0B31568E110D432516281F2E007C98D1; preference=signencrypt X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 208.118.235.17 X-Spam-Score: -4.3 (----) X-Mailman-Approved-At: Sun, 30 Aug 2015 20:21:45 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.3 (----) --wRRV7LY7NUeQGEoC Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In order to avoid having users pull emacs packages over HTTP (where they can be intercepted and modified by network attackers), I have changed the default URLs for the package repositories to use HTTPS. The first patch is a change to the default config for elpa.gnu.org and the second patch updates the manual and FAQ to use HTTPS URLs in its examples. This is my first patch to emacs and while I have read the CONTRIBUTE file, it's quite possible I've missed something so feel free to let me know if there's any changes you'd like me to do to the formatting of the patches or commit messages. Francois -- http://fmarier.org/ --wRRV7LY7NUeQGEoC Content-Type: text/x-diff; charset=utf-8 Content-Disposition: attachment; filename="0001-Use-HTTPS-when-talking-to-elpa.gnu.org.patch" >From 8b194e2ce9850c40f75d8a79aa6fc952971710b7 Mon Sep 17 00:00:00 2001 From: Francois Marier Date: Sun, 30 Aug 2015 11:31:21 -0700 Subject: [PATCH 1/2] Use HTTPS when talking to elpa.gnu.org * emacs-lisp/package.el (package-archive-base): Point to https://elpa.gnu.org. * notes/elpa: Use "https" instead of "http" in full URL. --- admin/notes/elpa | 2 +- etc/NEWS | 2 ++ lisp/emacs-lisp/package.el | 2 +- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/admin/notes/elpa b/admin/notes/elpa index 3922604..cbd9861 100644 --- a/admin/notes/elpa +++ b/admin/notes/elpa @@ -10,7 +10,7 @@ repository named "elpa", hosted on Savannah. To check it out: Changes to this branch propagate to elpa.gnu.org via a "deployment" script run daily. This script (which is kept in elpa/admin/update-archive.sh) generates -the content visible at http://elpa.gnu.org/packages. +the content visible at https://elpa.gnu.org/packages. A new package is released as soon as the "version number" of that package is changed. So you can use `elpa' to work on a package without fear of releasing diff --git a/etc/NEWS b/etc/NEWS index 408286a..690126c 100644 --- a/etc/NEWS +++ b/etc/NEWS @@ -398,6 +398,8 @@ packages from `package-selected-packages' which are currently missing. *** New command `package-autoremove' removes all packages which were installed strictly as dependencies but are no longer needed. +*** elpa.gnu.org is now fetched over HTTPS by default. + ** Shell When you invoke `shell' interactively, the *shell* buffer will now diff --git a/lisp/emacs-lisp/package.el b/lisp/emacs-lisp/package.el index 7c4f21f..445af4e 100644 --- a/lisp/emacs-lisp/package.el +++ b/lisp/emacs-lisp/package.el @@ -204,7 +204,7 @@ If VERSION is nil, the package is not loaded (it is \"disabled\")." :risky t :version "24.1") -(defcustom package-archives '(("gnu" . "http://elpa.gnu.org/packages/")) +(defcustom package-archives '(("gnu" . "https://elpa.gnu.org/packages/")) "An alist of archives from which to fetch. The default value points to the GNU Emacs package repository. -- 2.5.1 --wRRV7LY7NUeQGEoC Content-Type: text/x-diff; charset=utf-8 Content-Disposition: attachment; filename="0002-Use-HTTPS-for-package-repo-URLs.patch" >From 0f9123d9d7b7cfc173d8871beb80e88b141d6397 Mon Sep 17 00:00:00 2001 From: Francois Marier Date: Sun, 30 Aug 2015 11:36:39 -0700 Subject: [PATCH 2/2] Use HTTPS for package repo URLs * doc/lispref/package.texi: Point to https://elpa.gnu.org. * doc/misc/efaq.texi: Update MELPA to its new domain. * doc/misc/efaq.texi: Update all mentioned repos to HTTPS. --- doc/lispref/package.texi | 6 +++--- doc/misc/efaq.texi | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/doc/lispref/package.texi b/doc/lispref/package.texi index f8eba2a..981c5d6 100644 --- a/doc/lispref/package.texi +++ b/doc/lispref/package.texi @@ -271,7 +271,7 @@ variable @code{load-file-name} (@pxref{Loading}). Here is an example: Via the Package Menu, users may download packages from @dfn{package archives}. Such archives are specified by the variable @code{package-archives}, whose default value contains a single entry: -the archive hosted by the GNU project at @url{http://elpa.gnu.org}. This +the archive hosted by the GNU project at @url{https://elpa.gnu.org}. This section describes how to set up and maintain a package archive. @cindex base location, package archive @@ -284,8 +284,8 @@ form @code{(@var{id} . @var{location})}, where @var{id} is the name of the archive (a string) and @var{location} is its @dfn{base location} (a string). -If the base location starts with @samp{http:}, it is treated as a HTTP -URL, and packages are downloaded from this archive via HTTP (as is the +If the base location starts with @samp{https:}, it is treated as a HTTPS +URL, and packages are downloaded from this archive via HTTPS (as is the case for the default GNU archive). Otherwise, the base location should be a directory name. In this diff --git a/doc/misc/efaq.texi b/doc/misc/efaq.texi index 3e9109d..9817ce6 100644 --- a/doc/misc/efaq.texi +++ b/doc/misc/efaq.texi @@ -3299,7 +3299,7 @@ see @ref{Packages that do not come with Emacs}. The easiest way to add more features to your Emacs is to use the command @kbd{M-x list-packages}. This contacts the -@uref{http:///elpa.gnu.org, GNU ELPA} (``Emacs Lisp Package Archive'') +@uref{https://elpa.gnu.org, GNU ELPA} (``Emacs Lisp Package Archive'') server and fetches the list of additional packages that it offers. These are GNU packages that are available for use with Emacs, but are distributed separately from Emacs itself, for reasons of space, etc. @@ -3308,8 +3308,8 @@ available, and then Emacs can automatically download and install the packages that you select. @xref{Packages,,, emacs, The GNU Emacs Manual}. There are other, non-GNU, Emacs Lisp package servers, including: -@uref{http://melpa.milkbox.net, MELPA}; and -@uref{http://marmalade-repo.org, Marmalade}. To use additional +@uref{https://melpa.org, MELPA}; and +@uref{https://marmalade-repo.org, Marmalade}. To use additional package servers, customize the @code{package-archives} variable. Be aware that installing a package can run arbitrary code, so only add sources that you trust. -- 2.5.1 --wRRV7LY7NUeQGEoC-- From unknown Sun Jun 22 00:54:07 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21382: [PATCH] Use HTTPS for package repo URLs Resent-From: Glenn Morris Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 31 Aug 2015 16:03:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 21382 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch To: Francois Marier Cc: 21382@debbugs.gnu.org Received: via spool by 21382-submit@debbugs.gnu.org id=B21382.144103697017833 (code B ref 21382); Mon, 31 Aug 2015 16:03:01 +0000 Received: (at 21382) by debbugs.gnu.org; 31 Aug 2015 16:02:50 +0000 Received: from localhost ([127.0.0.1]:43818 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZWRXl-0004dZ-Tb for submit@debbugs.gnu.org; Mon, 31 Aug 2015 12:02:50 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33288) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZWRXk-0004dO-Gf for 21382@debbugs.gnu.org; Mon, 31 Aug 2015 12:02:48 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZWRXf-0000s3-Gu for 21382@debbugs.gnu.org; Mon, 31 Aug 2015 12:02:48 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:53633) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZWRX8-0000fp-3v; Mon, 31 Aug 2015 12:02:10 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1ZWRX7-0002iz-Jn; Mon, 31 Aug 2015 12:02:09 -0400 From: Glenn Morris References: <20150830195637.GH5380@akranes.dyndns.org> X-Spook: AVN Phreaking ASO La Familia 22nd SAS Emergency Broadcast X-Ran: aXU<61iF4o#cMBZnqG[u7or5|IoPLD+1Q%;r#v:vnT`9fdPo X-Hue: black X-Attribution: GM Date: Mon, 31 Aug 2015 12:02:09 -0400 In-Reply-To: <20150830195637.GH5380@akranes.dyndns.org> (Francois Marier's message of "Sun, 30 Aug 2015 12:56:37 -0700") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Hi, Francois Marier wrote: > In order to avoid having users pull emacs packages over HTTP (where they can > be intercepted and modified by network attackers), elpa.gnu.org packages are gpg signed, which should prevent such modification. > I have changed the default URLs for the package repositories to use HTTPS. Thanks for the patch, but more is needed than just unconditionally changing http to https. See discussion in http://lists.gnu.org/archive/html/emacs-devel/2015-05/msg00110.html From unknown Sun Jun 22 00:54:07 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21382: [PATCH] Use HTTPS for package repo URLs Resent-From: Ted Zlatanov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 05 Nov 2015 19:37:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 21382 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch To: Glenn Morris Cc: 21382@debbugs.gnu.org, Francois Marier Received: via spool by 21382-submit@debbugs.gnu.org id=B21382.144675220717155 (code B ref 21382); Thu, 05 Nov 2015 19:37:01 +0000 Received: (at 21382) by debbugs.gnu.org; 5 Nov 2015 19:36:47 +0000 Received: from localhost ([127.0.0.1]:54987 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZuQL0-0004Sd-Ru for submit@debbugs.gnu.org; Thu, 05 Nov 2015 14:36:47 -0500 Received: from mail-yk0-f172.google.com ([209.85.160.172]:36716) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZuQKz-0004SV-0O for 21382@debbugs.gnu.org; Thu, 05 Nov 2015 14:36:45 -0500 Received: by ykba4 with SMTP id a4so149887472ykb.3 for <21382@debbugs.gnu.org>; Thu, 05 Nov 2015 11:36:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version:content-type; bh=G2qN17pqZxxOASr8VvnRYIgecEkGzVS+IJTRZqqtGNY=; b=fvdA2gOJlLt1DYKdVhnaw6rNbbsNPPCs1ul1mnRhyx8+UbMxq3pNaD+UM3yzqYAq+y r6wgxLYsNbldQM4d0DWVY+EiJbaD4JKO166oAEiLivSvuJ+szD6NkfvQLOQFFDaguJ/M CWxPGUt/NnE4IxsPQ66MjugkXfnHRzuLD+Zu0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=G2qN17pqZxxOASr8VvnRYIgecEkGzVS+IJTRZqqtGNY=; b=DtKoMc/bap0ktH/15NHdO207XNJccX6C5jpyeATwvadKenTVuDUP5/a2x72lli5hGO mYPuN+NbmjqgNRJ4RBNcofe8bO9r8VuiCI4+FiEk0o9KqjNG0vGlEYxwjcflCAVU0BIN tYV+iZ/QtfWkSq6vraRwqliLjckgJdRSTixny2GqCQ717xxI5gLZrBYIJjqpE7CBFNFk IJDdBkwD55IAnqG+k6h9itgseFsUn+l8D5athYvbkQhPXL4JNi6ZTuw3E9P8IQ7uMRSX +UY90aBBq030SxvKqSA/gdklhY0Pe4J58ZRS7yz1k2qqAVnewqSnhvdG1wBjIupI63FU x2cQ== X-Gm-Message-State: ALoCoQmUv0Mu1V+LLQawAVfJu3b3dpMCQUVrLFgkeRdbjXhYONm4w+VQPJFqKI4kUSGZ67yHeXIL X-Received: by 10.31.49.213 with SMTP id x204mr8901991vkx.51.1446752204111; Thu, 05 Nov 2015 11:36:44 -0800 (PST) Received: from flea ([98.229.60.157]) by smtp.gmail.com with ESMTPSA id g16sm5682407vke.11.2015.11.05.11.36.43 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 05 Nov 2015 11:36:43 -0800 (PST) From: Ted Zlatanov Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos References: <20150830195637.GH5380@akranes.dyndns.org> X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Thu, 05 Nov 2015 14:36:42 -0500 In-Reply-To: (Glenn Morris's message of "Mon, 31 Aug 2015 12:02:09 -0400") Message-ID: <87mvus2q7p.fsf@lifelogs.com> User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) On Mon, 31 Aug 2015 12:02:09 -0400 Glenn Morris wrote: GM> Francois Marier wrote: >> In order to avoid having users pull emacs packages over HTTP (where they can >> be intercepted and modified by network attackers), ... >> I have changed the default URLs for the package repositories to use HTTPS. GM> Thanks for the patch, but more is needed than just unconditionally GM> changing http to https. See discussion in GM> http://lists.gnu.org/archive/html/emacs-devel/2015-05/msg00110.html Francois, would you be interested in leading the work on those items? I'll assist any way I can but I am unable to do it myself. Ted From unknown Sun Jun 22 00:54:07 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21382: [PATCH] Use HTTPS for package repo URLs Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 25 Jun 2019 15:50:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 21382 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Francois Marier Cc: 21382@debbugs.gnu.org Received: via spool by 21382-submit@debbugs.gnu.org id=B21382.15614777832969 (code B ref 21382); Tue, 25 Jun 2019 15:50:02 +0000 Received: (at 21382) by debbugs.gnu.org; 25 Jun 2019 15:49:43 +0000 Received: from localhost ([127.0.0.1]:33305 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hfnhX-0000lm-JY for submit@debbugs.gnu.org; Tue, 25 Jun 2019 11:49:43 -0400 Received: from quimby.gnus.org ([80.91.231.51]:51800) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hfnhV-0000le-Fj for 21382@debbugs.gnu.org; Tue, 25 Jun 2019 11:49:42 -0400 Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=stories) by quimby.gnus.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hfnhR-0001Zh-Nn; Tue, 25 Jun 2019 17:49:39 +0200 From: Lars Ingebrigtsen References: <20150830195637.GH5380@akranes.dyndns.org> Date: Tue, 25 Jun 2019 17:49:37 +0200 In-Reply-To: <20150830195637.GH5380@akranes.dyndns.org> (Francois Marier's message of "Sun, 30 Aug 2015 12:56:37 -0700") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Francois Marier writes: > In order to avoid having users pull emacs packages over HTTP (where they can > be intercepted and modified by network attackers), I have changed the > default URLs for the package repositories to us [...] Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Francois Marier writes: > In order to avoid having users pull emacs packages over HTTP (where they can > be intercepted and modified by network attackers), I have changed the > default URLs for the package repositories to use HTTPS. This seems to have been fixed sometimes after this bug report, so I'm closing it. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Tue Jun 25 11:49:55 2019 Received: (at control) by debbugs.gnu.org; 25 Jun 2019 15:49:55 +0000 Received: from localhost ([127.0.0.1]:33308 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hfnhi-0000mC-TM for submit@debbugs.gnu.org; Tue, 25 Jun 2019 11:49:55 -0400 Received: from quimby.gnus.org ([80.91.231.51]:51814) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hfnhg-0000m4-5J for control@debbugs.gnu.org; Tue, 25 Jun 2019 11:49:52 -0400 Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=stories) by quimby.gnus.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hfnhd-0001Zp-EN for control@debbugs.gnu.org; Tue, 25 Jun 2019 17:49:51 +0200 Date: Tue, 25 Jun 2019 17:49:49 +0200 Message-Id: To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #21382 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: close 21382 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) close 21382 quit