Re: ELPA security

[Nic Ferrier]

Ted Zlatanov <address@hidden> writes:

> SM> I think the list of signed/unsigned archives should be managed
> SM> dynamically/automatically: if a signature is missing, ask the user if
> SM> she thinks it's normal, and if so, place the archive into a list of
> SM> "unsigned archives", so the question is not repeated.  But every time we
> SM> access the archive, we still try to get the a signature.  If we do find
> SM> a signature, then remove the archive from the "unsigned archives" list.
>
> I'd rather go with the `etc/elpa/A' scheme above.  Can you please
> consider it?

FWIW I run marmalade-repo and I prefer Stefan's suggestion.



Nic Ferrier