From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 78W9AWbaN2KYfgAAgWs5BA (envelope-from ) for ; Mon, 21 Mar 2022 02:52:38 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id iJtMNWXaN2JyQgAAG6o9tA (envelope-from ) for ; Mon, 21 Mar 2022 02:52:37 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6D765253FD for ; Mon, 21 Mar 2022 02:52:37 +0100 (CET) Received: from localhost ([::1]:46714 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nW7Do-0002TG-7H for larch@yhetil.org; Sun, 20 Mar 2022 21:52:36 -0400 Received: from eggs.gnu.org ([209.51.188.92]:58388) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nW7DR-0002St-UP for Emacs-orgmode@gnu.org; Sun, 20 Mar 2022 21:52:13 -0400 Received: from protestant.ebb.org ([50.56.179.12]:40076) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nW7DQ-0005Lc-2C for Emacs-orgmode@gnu.org; Sun, 20 Mar 2022 21:52:13 -0400 Received: from localhost (unknown [216.161.86.18]) (Authenticated sender: bkuhn) by protestant.ebb.org (Postfix) with ESMTPSA id 3045382088; Sun, 20 Mar 2022 18:52:10 -0700 (PDT) Date: Sun, 20 Mar 2022 18:22:15 -0700 From: "Bradley M. Kuhn" To: Ihor Radchenko Subject: Re: Links to javascript-based websites from orgmode.org: Paypal and Github Message-ID: References: <87ilt3yvqj.fsf@localhost> <877d9j3u91.fsf@localhost> <17c95e5a298c213c63b6f7ac9f05aac4@posteo.de> <87y21z2d2b.fsf@localhost> <871qzqg81c.fsf@gnu.org> <87r17q2n3i.fsf@localhost> <877d9ij990.fsf@gnu.org> <874k3seuec.fsf@localhost> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <874k3seuec.fsf@localhost> Received-SPF: pass client-ip=50.56.179.12; envelope-from=bkuhn@ebb.org; helo=protestant.ebb.org X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Emacs orgmode Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1647827557; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=mgsBryVcZh6l08soJltUuPHzCMY0Mvpdx+aV4e3wVwA=; b=h9REGkleI/xLGnr/PrHUCzxfBhIp7I1ggq1O2NehBpAgLShC7zfsCY6kiy79XwoYMdkREo FRljGn0pdRAsVMDgeAZCQP3OqRAsNOqZB4I8BVHajlz2C7M9KCzkZd7hQFjq5utxGdp/OM fpl2tPN7e2xLXsI/8DaiFTEqBzrfPzwips5l6/Zy7fBSxWKbQzUMww7gWhT08yABjA/WOp vW3h6S3R/uG33VLPJ76PQACwjF/GqojS7GMD1jfOp/YlOgWBxcqF4RIBtpnSaVPZ06TQcT jYidGvU7Xd7BFNGCqsWyNYP8TMbvLKRLVhaJ7CIUl0XECtuyVMF6BgJK//+fMA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1647827557; a=rsa-sha256; cv=none; b=pIt1PLgQ4VhKPmS0JJ0rJlXF1N4aeibLbXlhhUqpFpdQkeF0WwiHr7xVDMzofi5PVR2Cvi ntrweUw1SDJvWLniua8xXajwLJVoY0V0HdOjXGpGRpnL781OQgqTMUygvv9XFoD/WD2SgF 0h9xY2QEV5aZ3bxK7Y9OSJ+5d5NsKHOeOsG1WCqICjhoweg9HXsD5lKQ9Za+Z+CFr3lzXb E3Z1kga04WGcyMJIH0XuSNHTHlQR8StdBdNRuW36vHdfwC03pJEX+AoAXM7U151PViAKC7 U0kCaG7smLTbdayRrdfkpmQvpNJppjfQ2YSWqVRTMsj4R6MCsHMNFh9wnOFiSQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.92 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 6D765253FD X-Spam-Score: -3.92 X-Migadu-Scanner: scn0.migadu.com X-TUID: j/VFWeV3DX5k > "Bradley M. Kuhn" writes: > > I generally recommend PayPal to projects that want to minimize > > proprietary Javascript because you cn often make it all the way through a > > PayPal transaction (if you already have a PayPal account with a credit > > card attached and you're in the USA) with Javascript fully turned off. Ihor Radchenko wrote: > Could you elaborate a bit why you consider PayPal better than Librepay > (Stripe)? Note that Librepay isn't a payment processor; it's a fundraising site that is a consumer (rather than provider) of payment processing. Underneath, Librepay uses PayPal and/or Stripe (and maybe other payment processors, but I think those are the primary two, and possibly the only two, that Librepay supports). In my work at Software Freedom Conservancy (and at other charities before it), I've evaluated and keep good tabs on how much proprietary software users are required to install (usually in the form of proprietary Javascript) to donate money via various payment processors. It *is* possible to get all the way through a PayPal donation without running proprietary Javascript once you already have a PayPal account. This isn't true with Stripe; every Stripe transaction needs proprietary Javascript. Meanwhile, PayPal definitely keeps getting worse, so their advantage over Stripe isn't particularly strong. I have heard from folks outside the USA that it's absolutely impossible to do anything on PayPal without proprietary Javascript. When you're geolocated as being in the USA, things are slightly better with PayPal with regard to Javascript requirements. If you are in the USA and have a pre-existing PayPal account, then likely you can get all the way through the payment without running proprietary Javascript. > I made an attempt to pay using PayPal with LibreJS extension and I was > unable to go through even a little. … For Librepay, I made all the way to > the point where I had to run Stripe. Right, but that is merely comparing an apple martini to an apple juice box, and pointing out the latter didn't cause the user to become intoxicated. AFAICT, Librepay doesn't process payments without Stripe or PayPal (or some other payment processor). Obviously if you like the add-on services that Librepay offers for donation solicitation/management on top of payment processing, then by all means use that too. But ultimately underneath, you'll be using some payment processor. > Now, we have removed PayPal and left Librepay option in orgmode.org, but if > you think that PayPal should be considered better compared to Librepay > ethically, we would like to hear your opinion. Again, the individual (and I think it is just one person) that runs Librepay is providing a service that some folks like, but that service isn't processing payments, AFAIK. If you're encourage people to donate to orgmode via Librepay, you're encouraging them to use either PayPal or Stripe, ultimately, since they won't finish the donation transaction without using an underlying payment processor. As I said, if you like the add-ons that Librepay is providing on top of PayPal and/or Stripe, then of course enjoy them, since Librepay *itself* (AFAIK) is licensed freely. But, if you goal is to find a payment processor that doesn't require users to (at least sometimes) run proprietary Javascript, then there is basically no way to do it, unless you do the PCI compliance yourself, which is a staffing commitment. (I discussed this in my prior email.) Thank you again for orgmode. I use it every day! -- bkuhn