-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 05.01.15 00:58, Robert J. Hansen wrote: >> An argument, why your policy is based on one irrational human >> would be nice. It may be the case, that people don't want >> intelligence people on software, but as far as it's public, you >> are not. There is one email of a probably crazy human, who maybe >> claim the opposite, and that's why you don't want to contribute. >> Please clear me up. I think I don't understand. > > I’m going to summarize it one last time. > > I have lifelong close affiliations with government and > law-enforcement. For this reason, it is important that I never > touch the codebase of anything that people fear might be a target > for subversion by the United States government. The rationality > of that fear is irrelevant; the presence of that fear in a large > fraction of the userbase is what’s relevant. The Enigmail and > GnuPG developers are aware of this concern and at present *none* > of the Enigmail or GnuPG developers have said, “Rob, the > contributions you could make to the code outweigh the fear it would > cause among the users.” (In fact, if I were to submit a patch, I > suspect Patrick would reject it without ever reading it. I very > much hope so.)
Yes, I think that's what I would do. The problem that Rob is addressing is the fact nobody can read all of the code if the code base gets too large. Enigmail is comparatively small, and I (still) review everything that's committed. But when it comes to GnuPG, nobody would still know all of the code. And Thunderbird is even worse - the source code occupies 928 MB on my machine. What Rob says is: the fact that you can read the code doesn't mean that you can read it *completely*. You therefore have to *trust* the developers that they do what they promise. This is true for both open and closed source products. And trust would be compromised if people like Rob would contribute to code in GnuPG or Enigmail. - -Patrick -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJUqk5cAAoJEMk25cDiHiw+EKgH/jQyKJVMzEmnK3aYxWrZQo1+ BAto1QLbrBeYN78lFFBHAEJsrrpIY0o0yv7OCfyqThou8e9CJy4UddGZZiLo2lE4 58g/eWMI9+VVLctr+o47uQakOaCqGtbLduzrv1VBiA2q+MlljoC6NgOO9jcS9yj4 F2mQCcYLZxcCie8R+1bgKVZF2BHx7ZqmXzUe5w2LWdnYK+4DVE5ckIt+6b5Yw0Yn 9lWvRVqD0Uk/lRNNjTc6gbbyAD8YLfrz3hO70YMCav/yEtKxVzLA2SdKHBdsCzHE +1NNeXSMlfTMdNfP2kiNcZYNb3t8Y+QwtqZLmGKEmrf0oaVfaqRWMWCyccWSLWM= =8/Qf -----END PGP SIGNATURE----- _______________________________________________ enigmail-users mailing list [email protected] To unsubscribe or make changes to your subscription click here: https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
