From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id eI1SGZ23x2KFWQAAbAwnHQ (envelope-from ) for ; Fri, 08 Jul 2022 06:50:37 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id uLo+F523x2IfgQEAG6o9tA (envelope-from ) for ; Fri, 08 Jul 2022 06:50:37 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E93061546D for ; Fri, 8 Jul 2022 06:50:36 +0200 (CEST) Received: from localhost ([::1]:33062 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o9fwq-0005Ix-6k for larch@yhetil.org; Fri, 08 Jul 2022 00:50:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40150) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o9fv0-0004MQ-BV for emacs-orgmode@gnu.org; Fri, 08 Jul 2022 00:48:42 -0400 Received: from mail.tuxteam.de ([5.199.139.25]:48398) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o9fux-0001bK-Vt for emacs-orgmode@gnu.org; Fri, 08 Jul 2022 00:48:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tuxteam.de; s=mail; h=From:In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:To:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=dKq0D1+ev5V1f778PT5CYqBbO3GtXiKwQMwO0h/FfLQ=; b=MqZho/rW3mLV28fXHtt8FnwKLV nG6rVCt6rQ/MQShO84o3PIWrxE5NVfG9KbbJHif/h+oyZMDVnmzuVsdvv8DHEw0l/+KJztwQ9HbiY UZaJvEbpYkS9vTmgFVtRJLSn/XZxmB5AdecJxrpIK3EjzVhyTBtoHvLvnRKe1t7DD+IsagWcEgVPP Tlw6sh5GcpCqy4MEKH98N4NXVOwvu6VM6fzHKsKFEVGCENjji34DRfkc8zAD1IpdwJG94JN+o6f6d xs6cEkMCVwNqDe5bpxVk0EQvGuavN367NYsBcVBCb55z2brMvCenyyjKG3fxlmD45e+QHqudJn+SW U9k+ueZA==; Received: from tomas by mail.tuxteam.de with local (Exim 4.94.2) (envelope-from ) id 1o9fuu-0003um-8h for emacs-orgmode@gnu.org; Fri, 08 Jul 2022 06:48:36 +0200 Date: Fri, 8 Jul 2022 06:48:36 +0200 To: emacs-orgmode@gnu.org Subject: Re: Links to javascript-based websites from orgmode.org: Paypal and Github Message-ID: References: <87fsjhz7t0.fsf@gmail.com> <87tu7xm4ru.fsf@localhost> <8735fenvzy.fsf@aol.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="zWl3VHoja2r0sEEc" Content-Disposition: inline In-Reply-To: From: Received-SPF: pass client-ip=5.199.139.25; envelope-from=tomas@tuxteam.de; helo=mail.tuxteam.de X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1657255837; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=dKq0D1+ev5V1f778PT5CYqBbO3GtXiKwQMwO0h/FfLQ=; b=BTM9zDrjoQjrtcqZ68nzGabUrX9QR7OY1x480Y0iQI1gmn+ABtTWWqNDzgx5vPMZwLIy1P fxTDLuF7v3VndQ9KgtbpfNigBEpZgZGxHAYnaKlQBLcw0RbRAsZTC/XXf1MR4P1CfJ1Qpr URA5iTGPQIGPLf9LrOHotrJ4SbGXORPSa0GDVcg6UqjGSlG55MdmSNar5xCGsf4pIkrwpq XuSnscNPKHHNyX4l1wRNY/lTOcOjgZXWBQInXRhBXdL+7Goj3tbogqCQCwKt0Y3Mp0AhQA G7Z3o9wGwsTBq9otpvB9DYdwcCBq8FbhBA1VdV3vl6yvccPD5efsP7HLQmr8Kw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1657255837; a=rsa-sha256; cv=none; b=d7+p5hXaczAit6FFlUd1iLxioDSVhWqJhCyiDglP+KMhmQrmUEaj3zrkOCjmAa7rkgabnY NbgMD4tiOp3MSKfZiMJtOVI8bRQUWVJVbPjNjN8IS0iPkjs657J6JNrnMY4QInCdIGw+oN qCRoBlEdp8Tpy2gDB8yJZ9c3KpfTLeCDWXKpaFpk3H6DaiJWZDHOTALW6drHQc/1IODjPH zfxBvmOcbn/M3qZnilOrnHZULqXpPHRc/jYLYm+I0OzLbXu9JU4FAEZsq/vbXniOX8BBm5 WbzjLUwrENRmcYmLwHqRQ2SvF6DrWHqb/T+tApkn3r+QbZ6kTSxWe3QMDnMdNQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tuxteam.de header.s=mail header.b="MqZho/rW"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -0.84 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tuxteam.de header.s=mail header.b="MqZho/rW"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: E93061546D X-Spam-Score: -0.84 X-Migadu-Scanner: scn1.migadu.com X-TUID: shGiVchi8W3F --zWl3VHoja2r0sEEc Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jul 07, 2022 at 11:33:39PM -0400, Richard Stallman wrote: > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] >=20 > > "Note: To be PCI compliant, you must load Stripe.js directly from > > https://js.stripe.com. You cannot include it in a bundle or host > > it yourself. This package wraps the global Stripe function > > provided by the Stripe.js script as an ES module." >=20 > That is hard for me to understand, since I don't know what "PCI > compliant" means (or who is expected to comply with "PCI" or why). PCI probably refers to "Payment Card Industry" [1]: they set some standards people processing payments better follow or else. It's one of those cases where private industry gets to write things which amount to law. Much worse than traditional law because there is no democratic oversight to it. Typically they tend (by accident or by design) to be hostile to free software (the above is a good example of how that happens: they attach some magic property to having "loaded Stripe.js from [some specific URL]" thus hampering the copy, enhancement or distribution; you're only allowed to study (unless they serve obfuscated Javascript: I don't feel like looking). > Also, what is a "ES module" and what are the implications of that? That might be an "EcmaScript module" [2], given the context. > I wonder if users could run the free version of that JS code > while talking with Stripe. It's kind of free. If you modify it you stop being compliant, thus being allowed to use it. Cheers [1] https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Stand= ard [2] https://flaviocopes.com/es-modules/ --=20 t --zWl3VHoja2r0sEEc Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABECAB0WIQRp53liolZD6iXhAoIFyCz1etHaRgUCYse3HQAKCRAFyCz1etHa Rv3QAJ9/p8IxFtNSf4Mfj62dh4P5LkutzQCfc/NkBEICnJ47P7uMd5lHAYT+Q4g= =zTmR -----END PGP SIGNATURE----- --zWl3VHoja2r0sEEc--