Re: package.el + DVCS for security and convenience

[Ted Zlatanov]

On Tue, 01 Jan 2013 01:47:46 +0900 "Stephen J. Turnbull" <address@hidden> 
wrote: 

SJT> Ted Zlatanov writes:
>> The GnuTLS libraries are not an external binary tool.  Do you mean
>> `gnutls-cli'?

SJT> No, I mean the externally maintained *binary* libraries that will be
SJT> linked to, rather than called via fork or similar.

I see.  Thanks for explaining.

SJT> The question is whether dynamic linkage is any safer than using the
SJT> command line interface.
>> 
>> You should ask a security expert.

SJT> I've already cited a security expert (the GPG team).  You disclaim
SJT> expertise, but are willing to say you think following that advice is a
SJT> bad idea.  Hm.

I did not say the GPG team has given bad advice.

In any case, I think this discussion has served its purpose and hope we
can continue it with facts and code instead of suppositions.  I look
forward to that.

Thanks
Ted