Re: security of the emacs package system, elpa, melpa and marmalade

[Matthias Dahl]

Hello Richard...

> I think that we should warn users that it is risky to use packages
> from archives that don't supervise the code that gets put in them, or
> that don't use signing.

+1

But imho, this would also include ELPA because there is not really a
control process in place. A mail gets sent that some person from the
community needs to thoroughly read/check. There is no guarantee that
someone will actually do this.

So long,
Matthias

-- 
Dipl.-Inf. (FH) Matthias Dahl | Software Engineer | binary-island.eu
 services: custom software [desktop, mobile, web], server administration