From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arun Isaac Subject: Re: Why no secure code retrieval Date: Wed, 29 Jun 2016 11:41:22 +0530 Message-ID: <87mvm4sewl.fsf@systemreboot.net> References: Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55094) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bI8iz-0000Bd-GR for emacs-orgmode@gnu.org; Wed, 29 Jun 2016 02:11:50 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bI8iu-0006Rm-Dz for emacs-orgmode@gnu.org; Wed, 29 Jun 2016 02:11:49 -0400 Received: from [117.218.232.8] (port=46704 helo=hrrol) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bI8it-0006Rb-RU for emacs-orgmode@gnu.org; Wed, 29 Jun 2016 02:11:44 -0400 In-reply-to: List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org Sender: "Emacs-orgmode" To: Konstantin Kliakhandler Cc: emacs-orgmode@gnu.org --=-=-= Content-Type: text/plain > However, gpg signing release tag commits is dead simple and would > take a total of maybe 10 minutes of work over the lifetime of the project > (please correct me if I'm wrong). I second this statement. GPG signing sounds good to me. We should do this. > I know that https can be a bit tedious to setup so I am not asking for it > (though I do think it would be great if it was enabled on the site in some > fashion). HTTPS is not so tedious these days with Let's Encrypt. https://letsencrypt.org/ We should set up HTTPS as well. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXc2aLAAoJEC4l7othgCuzaBAH/0n490RZCcHkwxRJEFkNdNxZ qKNvoAiQmQmHXo3S9q1vmtG+rGV3OslcLOgv3OIS9zaXeHU+e2bkCQzN8IX2a11q ilzmtr0gO6CanWgrQ/r9P4AeMMaqMLdS0AT3TW2GU2UabMTqu4VTm6OBAocT5wyH b7KRVHDmynr+XLLbGIu2Hya26x3C+vAQYuQ3Vvh57VIbonVnAxBSzl8nfxMNCOBy Z/Q/VMfnJ5bcV8epaQme4bU7/NBZesfBzVZujvaIBVh6FZ13coSFNf9mRbhqeVtv yqhbHbdg0mZVUtjvd4/uMGD523vHwRfROtqARMAeQBHV8EwVav3QxkKA5rHHoEE= =hI0d -----END PGP SIGNATURE----- --=-=-=--