emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH] package.el: check tarball signature


From: Eli Zaretskii
Subject: Re: [PATCH] package.el: check tarball signature
Date: Fri, 04 Oct 2013 22:23:06 +0300

> From: Stefan Monnier <address@hidden>
> Date: Thu, 03 Oct 2013 11:01:43 -0400
> 
> > +(defcustom package-check-signature 'allow-unsigned
> > +  "Whether to check package signatures when installing."
> > +  :type '(choice (const nil :tag "Never")
> > +                (const allow-unsigned :tag "Allow unsigned")
> > +                (const t :tag "Check always"))
> > +  :risky t
> > +  :group 'package
> > +  :version "24.1")
> > IMHO this should be per archive, not global.  WDYT?
> 
> Actually, let's wait.  If all turn out well, most/all ELPA archives will
> start providing signatures in the not too distant future and there'll be
> no need for per-archive settings (and we can change the default to t).

Are you saying that verification will not need gpg be installed?



reply via email to

[Prev in Thread] Current Thread [Next in Thread]