Re: [Imaging] Drop Serializable

2023-08-31 Thread Gary Gregory
Why?

Gary

On Thu, Aug 31, 2023, 10:41 AM Elliotte Rusty Harold 
wrote:

> This should be a major version bump.
>
> On Thu, Aug 31, 2023 at 1:26 PM Gary Gregory 
> wrote:
> >
> > Hi All,
> >
> > I propose we drop implementating Serializable and avoid any and all
> > possible security issues in this area.
> >
> > Gary
>
>
>
> --
> Elliotte Rusty Harold
> elh...@ibiblio.org
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


Re: [Imaging] Drop Serializable

2023-08-31 Thread Bruno Kinoshita
I believe we haven't had a 1.0 yet, and we discussed previously about
breaking changes in the current pre 1.0 release. I think there are still
some issues that veto'ed 1.0 before that also need to be fixed, but it
shouldn't be too hard to prepare a 1.0 soon-ish.

On Thu, 31 Aug 2023 at 16:41, Elliotte Rusty Harold 
wrote:

> This should be a major version bump.
>
> On Thu, Aug 31, 2023 at 1:26 PM Gary Gregory 
> wrote:
> >
> > Hi All,
> >
> > I propose we drop implementating Serializable and avoid any and all
> > possible security issues in this area.
> >
> > Gary
>
>
>
> --
> Elliotte Rusty Harold
> elh...@ibiblio.org
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


Re: [Imaging] Drop Serializable

2023-08-31 Thread Elliotte Rusty Harold
This should be a major version bump.

On Thu, Aug 31, 2023 at 1:26 PM Gary Gregory  wrote:
>
> Hi All,
>
> I propose we drop implementating Serializable and avoid any and all
> possible security issues in this area.
>
> Gary



-- 
Elliotte Rusty Harold
elh...@ibiblio.org

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Re: [Imaging] Drop Serializable

2023-08-31 Thread Bruno Kinoshita
+1

On Thu, 31 Aug 2023 at 15:46, Gary Lucas  wrote:

> +1  agree.
>
> On Thu, Aug 31, 2023, 9:29 AM Gary Gregory  wrote:
>
> > Hi All,
> >
> > I propose we drop implementating Serializable and avoid any and all
> > possible security issues in this area.
> >
> > Gary
> >
>


Re: [Imaging] Drop Serializable

2023-08-31 Thread Gary Gregory
Done in git master. Only 2 classes affected.

Gary

On Thu, Aug 31, 2023, 9:46 AM Gary Lucas  wrote:

> +1  agree.
>
> On Thu, Aug 31, 2023, 9:29 AM Gary Gregory  wrote:
>
> > Hi All,
> >
> > I propose we drop implementating Serializable and avoid any and all
> > possible security issues in this area.
> >
> > Gary
> >
>


Re: [Imaging] Drop Serializable

2023-08-31 Thread Gary Lucas
+1  agree.

On Thu, Aug 31, 2023, 9:29 AM Gary Gregory  wrote:

> Hi All,
>
> I propose we drop implementating Serializable and avoid any and all
> possible security issues in this area.
>
> Gary
>


Re: [Imaging] Drop Serializable

2023-08-31 Thread sebb
On Thu, 31 Aug 2023 at 14:29, Gary Gregory  wrote:
>
> Hi All,
>
> I propose we drop implementating Serializable and avoid any and all
> possible security issues in this area.

+1

It is extra work ensuring that the feature works properly let alone securely.

> Gary

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Re: [Imaging] Drop Serializable

2023-08-31 Thread Gilles Sadowski
Hello.

Le jeu. 31 août 2023 à 15:29, Gary Gregory  a écrit :
>
> Hi All,
>
> I propose we drop implementating Serializable

+1

Gilles

> and avoid any and all
> possible security issues in this area.
>
> Gary

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



[Imaging] Drop Serializable

2023-08-31 Thread Gary Gregory
Hi All,

I propose we drop implementating Serializable and avoid any and all
possible security issues in this area.

Gary