On 03/12/18 14:06, Kurt Jaeger wrote:
Yes, but the boundary can not be drawn at the 'source' border.
My fear is that we do not really understand where the border lies.
In general this is true. However, in case of Go or C++ the boundary is
clear. -)
Yuri
___
Hi!
> On 03/12/18 13:42, Adam Weinberger wrote:
> > While source is preferred over binary, we don???t delete ports just
> > because they have binary blobs.
> Binary downloads have an entirely different trust model. You have to
> trust the producer of the binary, vs. with source code it is much
On 03/12/18 13:42, Adam Weinberger wrote:
While source is preferred over binary, we don’t delete ports just
because they have binary blobs.
Binary downloads have an entirely different trust model. You have to
trust the producer of the binary, vs. with source code it is much more
obvious wha
On 12 Mar, 2018, at 11:30, Yuri wrote:
There should be no reason to download prebuilt executables for open
source software. Binaries present security risk.
It violates chapter 5.4 of PHB which mentions that MASTER_SITES/DISTNAME
refers to "source archive", and for sysutils/ipfs-go it isn't
Also https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218179
On 18-03-12 10:30:53, Yuri Victorovich wrote:
> There should be no reason to download prebuilt executables for open
> source software. Binaries present security risk.
>
> It violates chapter 5.4 of PHB which mentions that MASTER_SITES
