Re: New package: FPLLL

[Ludovic Courtès]

Andreas Enge <address@hidden> skribis:

> Am Donnerstag, 20. Dezember 2012 schrieb Ludovic Courtès:
>> > I also tried to add gmp-ecm, but it is only downloadable over
>> > https://, which is not yet implemented.
>> Oh.  Would be great if they had an FTP or HTTP mirror.
>
> Would it be difficult to implement in guix? There are guile bindings
> in gnutls.

Right, so that’s definitely doable.  It just has to be done.  :-)

> One cannot reasonably tell people who use crypto to not do so.

OTOH, what matters most here is the authenticity and integrity of the
tarball, and TLS doesn’t help here.

(FWIW I’m also fond of EFF’s HTTPS-Everywhere; I just don’t think it’s
this relevant here, esp. since we’ll eventually have content-based
mirrors as on hydra.nixos.org.)

Thanks,
Ludo’.