diff options
| author | Stefan Kangas <stefankangas@gmail.com> | 2019-09-16 21:09:32 +0200 |
|---|---|---|
| committer | Stefan Kangas <stefankangas@gmail.com> | 2019-09-20 19:20:38 +0200 |
| commit | f1f2de7cdfa5e20577bbc2e2bf29de4cce525002 (patch) | |
| tree | aaed4b6a21986613296fcb4e40b78e1743738319 | |
| parent | cc59e292cf070296df5d0f73eef48af32e71f5f0 (diff) | |
| download | emacs-f1f2de7cdfa5e20577bbc2e2bf29de4cce525002.tar.gz | |
Recommend using https for package-archives
* lisp/emacs-lisp/package.el (package-archives): Recommend using https
sources where possible. (Bug#33825)
| -rw-r--r-- | lisp/emacs-lisp/package.el | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/lisp/emacs-lisp/package.el b/lisp/emacs-lisp/package.el index ef0c5171de6..1e136cb54f7 100644 --- a/lisp/emacs-lisp/package.el +++ b/lisp/emacs-lisp/package.el @@ -214,7 +214,10 @@ Each element has the form (ID . LOCATION). (Other types of URL are currently not supported.) Only add locations that you trust, since fetching and installing -a package can run arbitrary code." +a package can run arbitrary code. + +HTTPS URLs should be used where possible, as they offer superior +security." :type '(alist :key-type (string :tag "Archive name") :value-type (string :tag "URL or directory name")) :risky t |