> >This is ok if we shut down all any publically accessible mirrors which > >only offer binaries. Oliver Elphick <[email protected]> wrote: > Mirror site owners/administrators are responsible for their own > policies. Surely Debian itself is responsible only for ...debian.org?
I meant from the official mirrors list. To quote from README.mirrors: "A Secondary mirror site may have restrictions on what they mirror (due to space restrictions) that being source code or non-i386 binaries." One solution is for a well advertised public site to keep the GPLed sources around for three years after the binaries are deleted from all our mirrors, so that binary-only mirrors can "repeat the offer" for distribution of the source. Another is that we warn people who are interested in setting up mirrors that this is an issue -- that they're legally obligated to publically redistribute the sources if they publically redistribute the binaries. And drop from the official mirrors list any sites which would violate the GPL. -- Raul

