Re: Ubuntu 16.04 server --- Contacting host: elpa.gnu.org:80 when package-refresh-contents

[Robert Pluim]

Dan Čermák <dan.cermak@cgc-instruments.com> writes:

> The tile sounds a little click-baity, but it is actually a good tutorial
> how to secure the connection to (m)elpa.
>
> Afaik there has been no malware on melpa, but if you download your
> packages via http, someone could in theory tamper with your connection
> and inject malicious code.
>
> So, don't panic & use https ;-)

The upcoming Emacs 26 should be much better in this regards, as it
uses https by default for elpa downloads.  Some of the advice in that
blog entry is still useful though.

Robert