El vie, 29-01-2010 a las 12:08 +0100, Alvaro Lopez Ortega escribió:
> [...]
> 
> Yeah, the first option would be the ChangeLog file. As you've probably seen, 
> it's automatically build from the code repository commit messages.
> 
> The second option would be the much shorter 'Changes' summary included in 
> each release announcement. For instance, check out the announcement of 
> Cherokee 0.99.40:
> 
>   http://lists.octality.com/pipermail/cherokee/2010-January/012169.html
> 
> Of course, there's room of improvement, although I don't think we are doing 
> that bad at this respect. Am I missing something?

Yep, but this last release the log was kinda "vague":

- Fixes a last-minute regression. Some really common software did not
   run on Cherokee 0.99.41.

I mean, I must fear it? :) I'm affected? I MUST upgrade?

> > 2- I think Cherokee needs a "security" section in the web so anyone can
> > check the security track of the project.
> > [...]
> >    If I'm running Cherokee 0.xx.yy, is there something I must be
> > worried for?
> 
> I am all for this one. It's a superb idea! +1.
> 
> We should look for someone to take over this task though. Even if it isn't a 
> time consuming task, a highly committed person would be required to perform 
> the task.
> 
> Would you be willing to take on the task? -- long shot, I know :-)

I find Cherokee project quite interesting and I would be pleased to
help. I don't think it's more than giving some visibility to any changes
in each release that:

 a. can affect the stability of the service or
 b. can affect the security of the service

We must find the proper way to do it, some examples:

http://www.debian.org/security/
http://www.ubuntu.com/usn/

OK, both are distributions and deserve a different treatment for the
security stuff, but it can be a good starting point.

You know that the devil it's in the details, and something that simple
can make a product more trustworthy (ie. signing the releases with GPG
would be easy and a good point for Cherokee).

> > What do you think about it? I think both points could make Cherokee
> > server a better experience for administrators.
> 
> Thanks a million for sharing your ideas!

Thank you for taking them into account.

Regards,

Juanjo

-- 
jjm's home: http://www.usebox.net/jjm/
blackshell: http://blackshell.usebox.net/
 ramble on: http://rambleon.usebox.net/


_______________________________________________
Cherokee mailing list
[email protected]
http://lists.octality.com/listinfo/cherokee

Reply via email to