[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: package.el + DVCS for security and convenience

From: Ted Zlatanov
Subject: Re: package.el + DVCS for security and convenience
Date: Mon, 31 Dec 2012 08:50:08 -0500
User-agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.3.50 (gnu/linux)

On Mon, 31 Dec 2012 21:32:02 +0900 "Stephen J. Turnbull" <address@hidden> 

SJT> Ted Zlatanov writes:

>> Similarly, Emacs needs a secure way to get data in and out of that
>> storage from external files or data.  Depending on an external binary
>> tool, *long-term*, to provide this transfer is IMO a poor security
>> decision for a platform such as Emacs.

SJT> Yeah, well, aren't you the guy who put just such an external binary
SJT> tool into Emacs, aka gnutls?

The GnuTLS libraries are not an external binary tool.  Do you mean `gnutls-cli'?

SJT> The question is whether dynamic linkage is any safer than using the
SJT> command line interface.

You should ask a security expert.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]