GNU bug report logs - #33825
25.2; Failing to verify signature for ELPA debbugs package

Previous Next

Full log

Message #35 received at 33825 <at> debbugs.gnu.org (full text, mbox):

From: Eli Zaretskii <eliz <at> gnu.org>
To: Stefan Kangas <stefan <at> marxist.se>
Cc: rpluim <at> gmail.com, 33825 <at> debbugs.gnu.org, clemens.radermacher <at> posteo.de
Subject: Re: bug#33825: 25.2;
 , Failing to verify signature for ELPA debbugs package
Date: Mon, 16 Sep 2019 17:29:59 +0300

> From: Stefan Kangas <stefan <at> marxist.se>
> Date: Mon, 16 Sep 2019 13:04:55 +0200
> Cc: 33825 <at> debbugs.gnu.org, clemera <clemens.radermacher <at> posteo.de>
> 
> > I think this is notabug. We can always reopen it if needed.
> 
> Perhaps we could also add something about this issue to PROBLEMS?

Feel free to do that.

> How about also adding a recommendation to use https, as far as
> possible, for package archives?  I guess that could be added to both
> the doc string of package-archives and possibly also the manual.  That
> would help security and avoid issues such as these.

I'd leave this out of the manual.  Doc string should be enough.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.