Re: package.el + DVCS for security and convenience

[Bastien]

Hi Nic,

Nic Ferrier <address@hidden> writes:

> Ted Zlatanov <address@hidden> writes:
>
>> I propose to require signatures for ELPA packages and make package.el
>> aware of signatures:
>
> Requiring signatures would be VERY bad at this stage because you would
> break all the repositories that people get code from that do not support
> signing.

I may be wrong but I think Ted's suggestion is not for all repository
but for GNU ELPA, in which case I think it makes sense.

-- 
 Bastien