From afc49ccd4e3e593f1f2dfffbdd6e457132efa9cd Mon Sep 17 00:00:00 2001 From: Stefan Kangas Date: Mon, 16 Sep 2019 21:09:32 +0200 Subject: [PATCH] Recommend https for package-archives * lisp/emacs-lisp/package.el (package-archives): Doc fix to recommend using https sources instead of http where possible. (Bug#33825) --- lisp/emacs-lisp/package.el | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/lisp/emacs-lisp/package.el b/lisp/emacs-lisp/package.el index ef0c5171de..69c4427e0a 100644 --- a/lisp/emacs-lisp/package.el +++ b/lisp/emacs-lisp/package.el @@ -214,7 +214,10 @@ package-archives (Other types of URL are currently not supported.) Only add locations that you trust, since fetching and installing -a package can run arbitrary code." +a package can run arbitrary code. + +It is advisable to prefer HTTPS URLs over HTTP URLs where +possible, for improved security and stability." :type '(alist :key-type (string :tag "Archive name") :value-type (string :tag "URL or directory name")) :risky t -- 2.20.1