<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 30/09/2015 16:17, Steve Marquess
wrote:<br>
</div>
<blockquote class=" cite" id="mid_560BEEF2_5030803_openssl_com"
cite="mid:560BEEF2.5030803@openssl.com" type="cite">
<pre wrap="">On 09/30/2015 09:58 AM, Jakob Bohm wrote:
</pre>
<blockquote class=" cite" id="Cite_3432630" type="cite">
<pre wrap="">On 30/09/2015 15:34, Steve Marquess wrote:
</pre>
<blockquote class=" cite" id="Cite_23013" type="cite">
<pre wrap="">On 09/30/2015 09:18 AM, Jakob Bohm wrote:
</pre>
<blockquote class=" cite" id="Cite_6850266" type="cite">
<pre wrap="">...
Under the new "contribution agreement" scheme, publishing such items
early would also make them available to users ...
</pre>
</blockquote>
<pre wrap="">Publishing by someone else is fine, go for it. It would be nice to have
someone else publish FIPS module code, or validation information of any
kind for that matter. I think the validation process would be a lot less
capricious with less of the secrecy that is the current norm.
</pre>
</blockquote>
<pre wrap="">Point is that the contribution agreement contains a bug, whereby
anything not published by the OpenSSL Foundation in the UK is not
licensed to anyone.
Having a publication procedure for things marked "This does NOT
work in its current form, but we are giving you a license" works
around that bug ...
</pre>
</blockquote>
<pre wrap="">Speaking just for myself, and not my fellow team mates, I see no upside
and a lot of downsides to our hosting of "does not work" code
contributions. Especially for FIPS specific code. The originators of
that code are free to give it to anyone else at any time; they don't
need us to do so.
</pre>
</blockquote>
<tt>This is why I mentioned the historic contributions from <br>
Sun and Eay: They may be unable or unwilling to repeat <br>
the donation at a later date when it is actually needed.</tt><br>
<br>
<br>
<pre class="moz-signature" cols="72">Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. <a class="moz-txt-link-freetext" href="http://www.wisemo.com">http://www.wisemo.com</a>
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded </pre>
</body>
</html>