Stefano Mazzocchi wrote:
Bernd Fondermann wrote:
Fellow researchers,
to actually bring this crypto statement stuff forward I'd like to call
a vote. At first I thought lazy consensus would work, but I am not so
sure anymore (triggered by the comments in the thread starting here
[1]), so a vote is the safe way to go.
We have to report about the use of crypto code in Labs. Following the
instructions at [2], we should apply labs_crypto2.patch attached to
JIRA here [3] to its destination file found here[4].
Please vote:
[] Yes, apply the patch as described and kindly ask the Labs PMC chair
to send out the email as described in [2] afterwards.
[] I don't know, I don't care for this whole crypto stuff really much
[] No, don't apply the patch, there is something wrong with it. (Give
some reason, please)
The vote will not close before 2008-06-30 12:00 GMT.
With my chair hat on, I have a hard time executing the above since I
can't possibly be responsible of looking into every lab and hunt for
crypto stuff. I'm not even a crypto expert, I wouldn't even know what to
look for. I mean, is MD5 considered crypto? I wouldn't know.
I can go ahead and apply the existing patch, sure, no problems. But I
would like every single PI to tell me: yes, I've looked at it and it's
for for me.
Well, as the PI for Vysper I affirm to you: the patch is absolutely OK.
It contains only Vysper-related stuff and covers every crypto in this
lab. Please ask any specific question and I will answer.
I cannot speak for the other PIs, but delaying this patch would
eventually harm my lab which I am unlikely to be happy about. So I need
your help here.
(I'd even would commit the patch myself, but not without being ratified
by some PMC votes.)
It's clear that one person (chair or not) cannot oversee all lablings.
But the PMC as a whole is tasked with that and there are many
experienced apache people on it. So originally there should be no lack
of know-how of how to deal with crypto reporting and oversight in
general. But there seems to be little overlap between PMC members and
active lab committers. Maybe this is partly the reason why I feel this
issue is so hard to get sorted.
Bernd
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
