Hi Marco, At the time I started the thread, the specific term related to China reads as follows:
PLEASE NOTE THAT THE SOFWARE MAY NOT BE USED, DEPLOYED, OR INSTALLED IN THE PEOPLE'S REPUBLIC OF CHINA. [1] My concern with the above clause is that it starts the practice of HashiCorp targeting a group of the community resides in a specific region. I'm worried that they could change terms of use at any moment that could render the normal usage illegal and our community members liable. The situation has changed as HashiCorp indeed revised the specific clause to include only Vault enterprise version. From the reply I think you only read the updated version. Since the current version of their term of use doesn't affect our project anymore, I'm OK to leave it as is. -sz [1] https://pbs.twimg.com/media/EZLJJwjUYAM8Xk-?format=jpg&name=large On 2020/05/31 09:58:08, Marco de Abreu <marco.g.ab...@gmail.com> wrote: > The statement is specifically about HashiCorp Vault enterprise edition - > speak a single module of their enterprise suite which is about credential > encryption. > > I didn't read further, but my first guess is that they are not offering it > in China since the Chinese government - as far as I can recall - is > restricting the usage of encryption methods to those, which they consider > weak and exploitable. > > From that point on, it becomes more a political question. I personally am > quite concerned about a government using their power to undermine security > of software. > > Since this statement is only about vault enterprise edition and we're not > using vault at all, I'd leave it as is. Supporting such a horrible practice > by "boycotting" HashiCorp in general would send the wrong signals from an > open source communities point of view. > > -Marco > > Sheng Zha <zhash...@apache.org> schrieb am So., 31. Mai 2020, 05:08: > > > Dear community, > > > > Yesterday, HashiCorp added to their terms of evaluation the clause that > > forbids usage of the enterprise version of any HashiCorp software in the > > People's Republic of China [1]. While this does not affect the usage of the > > community version, it does signal the potential legal risk to many of our > > community members in China. In light of this recent development, I'm > > initiating discussion on deprecating the usage of HashiCorp software and > > services and forbidding their usage in MXNet infrastructure until situation > > changes. > > > > I believe that the community cannot be traded for the technological > > convenience. Currently, we have part of our CI and GitHub labeling robot > > bootstrapping logic that relies on Terraform, a service provided by > > HashiCorp [2]. Since all its usage that I found are for bootstrapping on > > AWS, replacing them with CloudFormation is feasible and likely > > straightforward. > > > > Your input is appreciated. > > > > Regards, > > Sheng > > > > [1] https://www.hashicorp.com/terms-of-evaluation > > [2] > > https://github.com/apache/incubator-mxnet-ci/search?q=terraform&unscoped_q=terraform > > > > >
