From owner-freebsd-ports@FreeBSD.ORG Thu Dec 13 10:28:04 2007 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 611DF16A419 for ; Thu, 13 Dec 2007 10:28:04 +0000 (UTC) (envelope-from freebsd-ports@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.freebsd.org (Postfix) with ESMTP id E3BCA13C447 for ; Thu, 13 Dec 2007 10:28:03 +0000 (UTC) (envelope-from freebsd-ports@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1J2lII-00027Q-IB for freebsd-ports@freebsd.org; Thu, 13 Dec 2007 10:27:54 +0000 Received: from jolt.modeemi.cs.tut.fi ([130.230.72.144]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 13 Dec 2007 10:27:54 +0000 Received: from tuomov by jolt.modeemi.cs.tut.fi with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 13 Dec 2007 10:27:54 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-ports@freebsd.org From: Tuomo Valkonen Date: Thu, 13 Dec 2007 10:27:47 +0000 (UTC) Lines: 41 Message-ID: References: <20071212073944.GC29211@soaustin.net> <20071212080932.GA30438@soaustin.net> <20071212083658.GA31114@soaustin.net> <47602AC8.7060609@csub.edu> <476030F0.50501@csub.edu> <20071212142045.de0dcc7e.wmoran@potentialtech.com> <20071213095657.GT11310@server.vk2pj.dyndns.org> X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: jolt.modeemi.cs.tut.fi User-Agent: slrn/0.9.8.1pl1 (Debian) Sender: news Subject: Re: Ion3 license violation X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2007 10:28:04 -0000 On 2007-12-13, Peter Jeremy wrote: > I'm not sure how me as an end user not bothering to update my > installed package for several months differs from me as a package > distributor failing to update a binary distribution to your latest > release within 28 days, As someone who's been using a particular version for some time, you are more likely to check for a new version before complaining. New consider a new _l_user that has just heard of Ion, installing it from a distro that doesn't keep up-to-date, and running into problems. Aside from lusers having no idea that the distro doesn't keep up-to-date, and distributes old broken development snapshots, running into problems is more likely after a new install than later on. That's what this is about. > In general, FreeBSD only distributes third-party packages in binary format. Umm.. the ports system is primarily source-based, and you distribute the sources. > How will this work if the end user does not have web access or doesn't > have the resources or desire to compile it? I did mention that this does not work for binary packages. > This signature was created using a self-signed key and is therefore > useless as a mechanism to verify the associated package. IRL-based PGP signing customs suck [1]. I don't even know anyone IRL that would have the slightest interest in using encryption. [1]: http://www.iki.fi/tuomov/b/archives/2006/06/25/T00_20_11/ > way to verify that the person who created that signature is the same > person who wrote the e-mail I am responding to or that either are > actually the author of the "official" version of Ion-3. That doesn't matter. What matters is that the _same_ key is used, after you've initially verified the package. -- Tuomo