[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: GnuPG homedir and package.el?
|
From: |
Ted Zlatanov |
|
Subject: |
Re: GnuPG homedir and package.el? |
|
Date: |
Mon, 20 Mar 2017 09:37:06 -0400 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) |
On Sat, 18 Mar 2017 12:26:13 +0100 Jens Lechtenboerger <address@hidden> wrote:
JL> On 2017-03-14, at 15:37, Ted Zlatanov wrote:
>> On Sat, 04 Mar 2017 17:41:54 +0100 Jens Lechtenboerger
>> <address@hidden> wrote:
>>
JL> is there a reason that package.el sets up its own GnuPG homedir (in
JL> package-import-keyring and package--check-signature-content)?
>>
>> Isolation? That way package management, where typically the user's
>> personal setup doesn't matter, doesn't overlap with personal GnuPG usage.
JL> Signature verification seems personal to me.
The isolation serves a purpose. I think the default behavior is better
for ease of use out of the box: it's less likely to break if a user
tinkers with their personal GnuPG setup.
The defcustom you introduced is the missing piece for more
advanced users, so I think that resolves the issue for everyone. I hope
you agree.
Ted