GNU bug report logs - #33825
25.2; Failing to verify signature for ELPA debbugs package

Previous Next

Package: emacs;

Reported by: clemera <clemens.radermacher <at> posteo.de>

Date: Fri, 21 Dec 2018 16:22:01 UTC

Severity: normal

Tags: patch

Found in version 25.2

Done: Stefan Kangas <stefan <at> marxist.se>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Robert Pluim <rpluim <at> gmail.com>
To: Stefan Kangas <stefan <at> marxist.se>
Cc: 33825 <at> debbugs.gnu.org, clemera <clemens.radermacher <at> posteo.de>
Subject: bug#33825: 25.2; , Failing to verify signature for ELPA debbugs package
Date: Mon, 16 Sep 2019 15:28:07 +0200

>>>>> On Mon, 16 Sep 2019 13:04:55 +0200, Stefan Kangas <stefan <at> marxist.se> said:

    Stefan> Robert Pluim <rpluim <at> gmail.com> writes:
    Stefan> The reporter verified he was indeed using http.  Is there anything
    Stefan> that can or should be done here, or is this to be closed as notabug?
    >> 
    >> I think this is notabug. We can always reopen it if needed.

    Stefan> Perhaps we could also add something about this issue to PROBLEMS?

Maybe.

    Stefan> How about also adding a recommendation to use https, as far as
    Stefan> possible, for package archives?  I guess that could be added to both
    Stefan> the doc string of package-archives and possibly also the manual.  That
    Stefan> would help security and avoid issues such as these.

This Iʼd be more in favour of.

Robert
This bug report was last modified 5 years and 243 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.