April 17, 2026

Trust issues, meet text editor

Towards Trust in Emacs

Emacs gets a “Trust this project?” pop‑up — relief, rage, and memes

TLDR: A new Emacs add‑on called trust‑manager asks you once per project if you trust it and restores disabled features with a click. Commenters are split: some praise frictionless security, others slam Emacs’s trust model, complain that even the *scratch* buffer is untrusted, and demand real sandboxing.

Emacs, the famously powerful text editor, just got a new peace offering for its trust drama: trust‑manager, a simple add‑on that asks once per project, “Do you trust this?” and then gets out of your way. It even auto‑trusts your own setup and shows a little red “?” you can click to flip a file to trusted. It’s on MELPA, the community package hub.

Cue the comment fireworks. One camp is ecstatic about reducing friction without throwing security overboard. Another camp is torch‑in‑hand mad at Emacs’s whole security vibe. The sharpest diss? A user declared the current trust model “makes no sense” and even “sins against logic and lisp,” arguing it’s paranoid and breaks the flow. Others zoomed in on the absurdities: why does Emacs distrust its own scratchpad? As one lamented, “Why is scratch untrusted!?” People joked that Emacs now has a built‑in trust therapist—and the red “?” is the Scarlet Letter of your code.

Security realists threw confetti at the author’s line that high‑friction safety backfires—“yes, finally someone gets it.” But the broader frustration bubbled up too: a top‑voted gripe begged for real sandboxing so tools stop asking for your whole disk and the internet just to autocomplete. Meanwhile, a tangent exploded about AI‑generated code and how trust is bigger than toggles—if you don’t understand the “why,” you’re not shipping it.

Bottom line: trust‑manager aims to calm the chaos with just‑in‑time prompts, but the community is split between “thank you” and “this system is broken—try again.”

Key Points

  • Emacs 30 added an explicit trust model, setting files untrusted by default and restricting risky features.
  • The trust model disables features like the Emacs Lisp Flymake backend in untrusted buffers, creating workflow friction.
  • Trust-manager, available on MELPA, introduces just-in-time project-level trust prompts and persists user choices.
  • Enabling trust-manager-mode auto-trusts init, early-init, custom files, and all load-path directories.
  • A mode line red “?” indicates untrusted Emacs Lisp buffers and allows one-click trust to re-enable features.

Hottest takes

"The trust model of Emacs makes no sense." — quotemstr
"Why is *scratch* untrusted!?" — accelbred
"I wish this was understood clearly by more security engineers" — TheChaplain
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.