From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id uBmGDO+1x2LFgwAAbAwnHQ (envelope-from ) for ; Fri, 08 Jul 2022 06:43:27 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 0BFdDO+1x2IhwAAAauVa8A (envelope-from ) for ; Fri, 08 Jul 2022 06:43:27 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id A488F28460 for ; Fri, 8 Jul 2022 06:43:26 +0200 (CEST) Received: from localhost ([::1]:55778 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o9fpt-0001MK-6s for larch@yhetil.org; Fri, 08 Jul 2022 00:43:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:39292) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o9fp5-0001MB-G1 for emacs-orgmode@gnu.org; Fri, 08 Jul 2022 00:42:35 -0400 Received: from mail-pf1-x42e.google.com ([2607:f8b0:4864:20::42e]:35721) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o9foz-0006iu-8d; Fri, 08 Jul 2022 00:42:35 -0400 Received: by mail-pf1-x42e.google.com with SMTP id x184so9197365pfx.2; Thu, 07 Jul 2022 21:42:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=references:user-agent:from:to:cc:subject:date:in-reply-to :message-id:mime-version; bh=rz6gJsmVX8UnRU1IXW/IkFC+WAfRDdQ2PWiMHByrFJE=; b=ab2lQ6RA2dqYQsAY6p6I5eD4C/wC2EZImB7gbO4sL1mbQY1rvVKVXX6wvs2FIvvqba 8bxN3srppTjMhqkN+CE+qt006aZmIdeZ1/dLBfzFs2ESz4n6Dt7qMF8D6b7o4YjR7tcO /FmB8e0Gqdq8OxTnTFxDh3oXXbUvnVY6SD3jumiMpjMQ+2lkQTdOmLB0oNmh/7UWaz6v 8MI3lydGAAsLZL9jCKhewFfaOUrDuax/XS+C3zalpBo6QusfgP261RLU6pUE2nx9j41/ MU7mK6cK4EH3IpXuZMR25Hs1x2pkaHu3uTb6ByreXJMevdfhEvA7F86CKFmtuVxP9FO+ Wgmg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:references:user-agent:from:to:cc:subject:date :in-reply-to:message-id:mime-version; bh=rz6gJsmVX8UnRU1IXW/IkFC+WAfRDdQ2PWiMHByrFJE=; b=7/X9PkweEf+Rcq5kfJr5yD/iT7UgDN+RC7NGWa8H+E9th6XuW9Dqg8huuEsMhijqSU w3k/wURgnQSZRINZ1pmlMtK10KYCtImgpwRgo62ueHVqN/gY7vLRMp/a3CHw+A7A+HA3 MVjKaocvSd7V38Qdgr6V4GGvYZF2ZCL7yCEPtE2t0I4Je8gOSqaYqKtzNtb/73yl+sKQ oj8mLP5sZTBtEVn7rxJSNph7GIeR9zV4Xu0PcLrPSSW8/L641ezUiCXN5/z6M87u5sfF YuMOLp1ivrwdRBkpepJOis5vDJm2WhuWvA53lPl+sRCnFvsF8dLpBgrx11Lh2wOjKKW5 H+8A== X-Gm-Message-State: AJIora9Ygro4dbbvx5wcYOK0zV0m3twFPqIdcLfFL+3iWUa/1Xa0M+Uv QPCRNZPx1HWLpzNS3xd7Vo95zHya88D97Rsw X-Google-Smtp-Source: AGRyM1vNUJtDSvcCZuIfFjT//yxzak3iCXIRdhTc7jLYovirIO8tlufLErUssC6wM3ZrJlwfYCcUCw== X-Received: by 2002:a05:6a00:f0e:b0:528:1b63:c9be with SMTP id cr14-20020a056a000f0e00b005281b63c9bemr1916803pfb.61.1657255346362; Thu, 07 Jul 2022 21:42:26 -0700 (PDT) Received: from dingbat (2001-44b8-31f2-bb00-9cde-15c9-f5bd-38d0.static.ipv6.internode.on.net. [2001:44b8:31f2:bb00:9cde:15c9:f5bd:38d0]) by smtp.gmail.com with ESMTPSA id a140-20020a621a92000000b005289fbef7c4sm5303000pfa.140.2022.07.07.21.42.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 07 Jul 2022 21:42:25 -0700 (PDT) References: <0472f849f3ae42df68b0f031d61594d9@posteo.de> <17c95e5a298c213c63b6f7ac9f05aac4@posteo.de> <87y21z2d2b.fsf@localhost> <871qzqg81c.fsf@gnu.org> <87r17q2n3i.fsf@localhost> <877d9ij990.fsf@gnu.org> <87iloyyd1y.fsf@localhost> <87r13kxh60.fsf@localhost> <87r13ao1p9.fsf@localhost> <87fsjhz7t0.fsf@gmail.com> <87tu7xm4ru.fsf@localhost> <8735fenvzy.fsf@aol.com> User-agent: mu4e 1.8.5; emacs 29.0.50 From: Tim Cross To: rms@gnu.org Cc: Hendursaga , yantar92@gmail.com, tecosaur@gmail.com, vikasrawal@gmail.com, bzg@gnu.org, c.buhtz@posteo.jp, emacs-orgmode@gnu.org Subject: Re: Links to javascript-based websites from orgmode.org: Paypal and Github Date: Fri, 08 Jul 2022 14:32:19 +1000 In-reply-to: Message-ID: <871quw9pw3.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2607:f8b0:4864:20::42e; envelope-from=theophilusx@gmail.com; helo=mail-pf1-x42e.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, T_SPF_HELO_TEMPERROR=0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1657255406; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=rz6gJsmVX8UnRU1IXW/IkFC+WAfRDdQ2PWiMHByrFJE=; b=uUEjyLGj/TSz82vEjUgacZTD9sbeAhLk1+zCeLAw+tqP4KrJwnTdDEEnbl91+Hgp7HXzRq ++rOFpWrvAGWr1vJwxjlGKKou3I4Fos5a9TB+t5ma0zgYRzfU8eMTP2PXoEmVnRCUw68XN on/6itF+JJ5OSO6KY4IBAZOnt2uWRoZFfr6Eb+8JuU2OD9FGCVJ6NyhtU/vOUXuJ5w+d1Y y82SmeG0UgjGAv0MNmQqoWvUAGz7URHTL5Ij6s5UxtSs7mrDMoDD7YQJJMpFf23BB1xxGF SACiadoxrt2OG42i7UctJUa502MYIY3QlfPNhctKji2fduNtfjh44uzhhGCD6Q== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1657255406; a=rsa-sha256; cv=none; b=LJ1SlMBEssrR1+ipQEO3Mg+RMhgy9Ms9S9755ywIS9xD3fM++YoWOC5qs/u69LjnlhugBZ 3TjaAoymX9TO0qjC5XlJqddM2a0stw+tRmaqQFmsOuKf5jtDcC8rEypWakBHfoOexQ9Yjq Aes9BT0xv9kVy0D217pUgAVzM3tl1xrpB6PBcZqE8F268mxMNLtO8r5FmXv3NA6vNr0Iz0 iGxSfbOquCHjRhlnTTbuR2+yI5l8LJiNw5RLI5L07wrRT+Nkw1NxLpOw22hDrcRgXB8ob2 5H4UpjR2+FBMZCuH9x4v8e1Om9Q3ufrBNNFOE4Qov/TecXwVn1hVp8VVd3kjzw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=ab2lQ6RA; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -7.44 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=ab2lQ6RA; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: A488F28460 X-Spam-Score: -7.44 X-Migadu-Scanner: scn0.migadu.com X-TUID: PrIEaizG2Cyh Richard Stallman writes: > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > > "Note: To be PCI compliant, you must load Stripe.js directly from > > https://js.stripe.com. You cannot include it in a bundle or host > > it yourself. This package wraps the global Stripe function > > provided by the Stripe.js script as an ES module." > > That is hard for me to understand, since I don't know what "PCI > compliant" means (or who is expected to comply with "PCI" or why). > Also, what is a "ES module" and what are the implications of that? > PCI = "Payment Card Industry Data Security Standard", which is a set of mandatory and requested measures merchants need to comply with in order to be permitted to process credit card transactions. There are different levels of compliance, which affect what the 'merchant' is allowed to do and/or the fees they must pay. ES = ECMAScript, the 'real' name for Javascript. > I wonder if users could run the free version of that JS code > while talking with Stripe. I think that is the point being made - it would seem you cannot. Richard, in all these discussions, the one question you have not addressed is why is it OK for the FSF to have a link to paypal on their donation page (https://my.fsf.org/donate), but you say individual projects cannot do the same? This seems inconsistent and potentially hypocritical.