Re: package.el + DVCS for security and convenience

[Ted Zlatanov]

On Mon, 31 Dec 2012 21:32:02 +0900 "Stephen J. Turnbull" <address@hidden> 
wrote: 

SJT> Ted Zlatanov writes:

>> Similarly, Emacs needs a secure way to get data in and out of that
>> storage from external files or data.  Depending on an external binary
>> tool, *long-term*, to provide this transfer is IMO a poor security
>> decision for a platform such as Emacs.

SJT> Yeah, well, aren't you the guy who put just such an external binary
SJT> tool into Emacs, aka gnutls?

The GnuTLS libraries are not an external binary tool.  Do you mean `gnutls-cli'?

SJT> The question is whether dynamic linkage is any safer than using the
SJT> command line interface.

You should ask a security expert.

Ted