From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id QFo/IV8EW2NhDwAAbAwnHQ (envelope-from ) for ; Fri, 28 Oct 2022 00:21:19 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id 0DxAIV8EW2OOkQAA9RJhRA (envelope-from ) for ; Fri, 28 Oct 2022 00:21:19 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 3FFF6157C5 for ; Fri, 28 Oct 2022 00:21:18 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ooBDk-0001mz-BB; Thu, 27 Oct 2022 18:19:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ooBDi-0001mr-VN for emacs-orgmode@gnu.org; Thu, 27 Oct 2022 18:19:27 -0400 Received: from stw1.rcdrun.com ([217.170.207.13]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ooBDh-0004xM-B9 for emacs-orgmode@gnu.org; Thu, 27 Oct 2022 18:19:26 -0400 Received: from localhost ([::ffff:102.85.119.94]) (AUTH: PLAIN admin, TLS: TLS1.3,256bits,ECDHE_RSA_AES_256_GCM_SHA384) by stw1.rcdrun.com with ESMTPSA id 0000000000081D90.00000000635B03EA.000053D7; Thu, 27 Oct 2022 15:19:21 -0700 Date: Fri, 28 Oct 2022 01:18:57 +0300 From: Jean Louis To: "Dr. Arne Babenhauserheide" Cc: Max Nikulin , 58774@debbugs.gnu.org, emacs-orgmode@gnu.org Subject: Re: bug#58774: 29.0.50; [WISH]: Let us make EWW browse WWW Org files correctly Message-ID: Mail-Followup-To: "Dr. Arne Babenhauserheide" , Max Nikulin , 58774@debbugs.gnu.org, emacs-orgmode@gnu.org References: <86bkq0qf8p.fsf@protected.rcdrun.com> <87y1t0or6q.fsf@web.de> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline In-Reply-To: <87y1t0or6q.fsf@web.de> User-Agent: Mutt/2.2.7+37 (a90f69b) (2022-09-02) Received-SPF: pass client-ip=217.170.207.13; envelope-from=bugs@gnu.support; helo=stw1.rcdrun.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Emacs-orgmode" Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1666909278; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=e/mFiPkT15zEGKFWl51CPq2fvZ0lbpYmYHluX8XUUpc=; b=ahKOBodlNYru40Wxcs+925Bjdz81y1f3DdB2FblcDV/lQ5gTr6ZGiJK886BbCmsFvwuI68 azVU+uObJBAFgR+8UN4GQNrnUgjF1SCwCmyQFZZ0PSemtSWJNiJYQM6s/nxFiJ8ndiGL6K oVPXMcHVOqhhZqXb9mXMXaQe+QrLc1k35j9YkZXrq0nCJjqBG5ffJ9wmh96jOEIMHPgVGo guHvD1CI+VJbaGm8St/Tj8p3/yVBjObinGmjuqhg4NXOUi6vA9EMlQbl2C8myBgxzjDbKU SGrgv211iOWkkhkD6Owk7ueJv8Qa25Kkw/+LgqEzM8D6D50GDv+PyntonE8xjg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1666909278; a=rsa-sha256; cv=none; b=aC2IelgRxmc2iV8/ZACt6nhztgRscHKtI55zyN3h1qYi6AebAjMDRpaevwIVLJdsAxWCX1 X+5wbP4Oo2noFDMZ9o/vMhFutGGhvrTZp3qQsvPoDbORynRibI5qjAeSB3Rcp5SxR0n1le dHj3hxwtuLNI47H80CNFIpaEBZCYIr67o6gavIKiP0nX4NpQaDVJTWtI6eMxWnYDR8byRl zg3vWnKtwqCFt9PqSPm1pAgRudoq2GyAjnyg9Hn+CJMf6VOy8FopdCn/aFpgfk4sCXBLMx L95Qt8h6aeR/owcfYD5t1N9KtZyJQ12MzdlwacBtjAH9dAHBZFc9sLjSXoErlg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -0.71 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 3FFF6157C5 X-Spam-Score: -0.71 X-Migadu-Scanner: scn1.migadu.com X-TUID: paxZcrJxRU7u * Dr. Arne Babenhauserheide [2022-10-28 01:11]: > > Max Nikulin writes: > > > How are you going to distinguish your personal files and arbitrary > > files from non-trusted sources? By signing your files and maintaining > > list of trusted certificates? > > One idea that could work well is to add an explicit allow-list > trusted-sources-to-allow-unsafe-modes with entries of domain and > path-prefix where people can add trusted sources. That implies that for every content type you are supposed to do the same. And what makes you want to limit people how they want to run their Org files? -- Jean Take action in Free Software Foundation campaigns: https://www.fsf.org/campaigns In support of Richard M. Stallman https://stallmansupport.org/