Re: Security in the emacs package ecosystem

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > > Maybe the default should be like t, but only when OpenPGP is available.

  > We could also display a warning, once, when we detect that OpenPGP is
  > not available and set the value to allow-unsigned.  This way the user
  > is alerted to the problem and can take action to fix it.

Alternatively, we could use Autoconf to check for GPG or PGP
when building Emacs.

-- 
Dr Richard Stallman (https://stallman.org)
Chief GNUisance of the GNU Project (https://gnu.org)
Founder, Free Software Foundation (https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)