Re: GNU ELPA security and Org-mode

[Stefan Monnier]

>> So the org-mode package has weaker points:
>> - uses http rather than https.
> Just to mention that org is now available through https too:
>  ~$ git clone https://code.orgmode.org/bzg/org-mode.git

We don't use the Git (currently), but yes, thanks for making an https
version available.

> Not sure if something remains to be done in this thread, but
> if I can help let me know.

Well, if the "list of tarballs" (at https://orgmode.org/elpa) could be
kept in a Git branch instead, that would be great.


        Stefan