Re: New wget maintainer
Zitat von Mauro Tortonesi [EMAIL PROTECTED]: IMVHO, the code in the trunk is ready to be released. Sure ?? ;-) It would be fine when at least the bugs would be eliminated which appeared new during the development of version 1.11. I, e.g., had reported a few issues after the last public beta in 08/2006, which so far are still there. Ref.: http://www.mail-archive.com/wget@sunsite.dk/msg09302.html http://www.mail-archive.com/wget@sunsite.dk/msg09303.html http://www.mail-archive.com/wget@sunsite.dk/msg09312.html Best regards, Jochen Roderburg ZAIK/RRZK University of Cologne Robert-Koch-Str. 10Tel.: +49-221/478-7024 D-50931 Koeln E-Mail: [EMAIL PROTECTED] Germany
Re: New wget maintainer
Micah Cowan [EMAIL PROTECTED] writes: The GNU Project has appointed me as the new maintainer for wget, Welcome! If you need assistance regarding the workings of the internals or design decisions, please let me know and I'll gladly help. I haven't had much time to participate lately, but hopefully I'll have more time in the following months.
Re: New wget maintainer
On Tue, 26 Jun 2007 13:33:35 -0700 Micah Cowan [EMAIL PROTECTED] wrote: hi micah, The GNU Project has appointed me as the new maintainer for wget, to fill the shoes that Mauro Tortonesi is leaving. I am very excited to be able to take part in the development of such a terrific and useful tool. I've certainly found it very helpful on many occasions. congratulations on your appointment as the new wget maintainer. i hope you'll have more time to dedicate to wget than i did so far, and i am sure you'll bring a lot of enthusiasm and new energies in the wget community. I have had the opportunity to go over most of the wget source code, and the last couple of years' worth of mailing list archives. This has given me a fairly good sense of where the project is, and where it could be going. I already have some ideas of some of the things I would like to see happen; many of them are already in the current TODO file. I've also assigned rough priorities (my own) to things I've seen in the TODO file, or bugs that have been reported on-list. Ideally, I'd like to start using a bug tracker to handle these; reading from the list, I know that this was Mauro's desire as well. Has consideration been given to using Savannah for this purpose? yes, we definitely need a bug tracker. Being that we seem to be very close to a release, I do not want to make a bunch of sudden changes, either to current processes or to the current plans for the imminent release. However, there are a couple of small items that I feel should absolutely be resolved before 1.11 is released officially: - Wget should not be attempting basic authentication before it receives a challenge (which could be digest or what have you). This is a security issue. i am not so sure this is a critical point. as hrvoje pointed out, basic authentication is definitely the most used authentication mechanism on the web, so changing the current policy to perform digest authentication first and use basic authentication as a failover might result in a perfomance penalty. in addition, both basic and digest authentication are meant to be used in https only. in fact, while digest authentication does not send the password in clear text over the wire, it certainly does not protect from MiM attacks. wrt digest authentication, it would be nice to have it work for proxy connections as well. so far, wget supports only basic authentication for HTTP proxies (no NTLM authentication either). - There was a report to the mailing list that user:pass information was being sent in the Referer header. I didn't see any further activity on that thread, and haven't yet had the opportunity to confirm this; it may be an old, fixed issue. However, if it's true, I would consider this to be a show-stopper. yes, we need to check that. I expect that both of these issues would require very small effort to resolve. don't be so sure about it ;-) Also, GNU maintainers have been asked to move all packages to version 3 of the GPL, which will be released on Friday the 29th. Ideally, maintainers have been asked to coincide releases with the license updates with the release of GPLv3; I don't think this is feasible in our case. Barring that, we have been asked to get such a release out by end-of-July. I'm not certain whether 1.11 will be ready in time; in that case, we could probably issue a 1.10.3 with only the licensing change. IMVHO, the code in the trunk is ready to be released. -- Mauro Tortonesi [EMAIL PROTECTED]
New wget maintainer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello all, The GNU Project has appointed me as the new maintainer for wget, to fill the shoes that Mauro Tortonesi is leaving. I am very excited to be able to take part in the development of such a terrific and useful tool. I've certainly found it very helpful on many occasions. Obviously, being previously uninvolved with the wget development community (newcomer), I'm unknown to you; but it is my hope that we can quickly become comfortable with each other, so our cooperation on wget can go as smoothly as possible. I realize that, as my experience with wget's internals is inferior to that of many of you with whom I'll be working, I will need to earn your respect before you can be comfortable with my making decisions regarding the direction this project takes. I have had the opportunity to go over most of the wget source code, and the last couple of years' worth of mailing list archives. This has given me a fairly good sense of where the project is, and where it could be going. I already have some ideas of some of the things I would like to see happen; many of them are already in the current TODO file. I've also assigned rough priorities (my own) to things I've seen in the TODO file, or bugs that have been reported on-list. Ideally, I'd like to start using a bug tracker to handle these; reading from the list, I know that this was Mauro's desire as well. Has consideration been given to using Savannah for this purpose? Being that we seem to be very close to a release, I do not want to make a bunch of sudden changes, either to current processes or to the current plans for the imminent release. However, there are a couple of small items that I feel should absolutely be resolved before 1.11 is released officially: - Wget should not be attempting basic authentication before it receives a challenge (which could be digest or what have you). This is a security issue. - There was a report to the mailing list that user:pass information was being sent in the Referer header. I didn't see any further activity on that thread, and haven't yet had the opportunity to confirm this; it may be an old, fixed issue. However, if it's true, I would consider this to be a show-stopper. I expect that both of these issues would require very small effort to resolve. Also, GNU maintainers have been asked to move all packages to version 3 of the GPL, which will be released on Friday the 29th. Ideally, maintainers have been asked to coincide releases with the license updates with the release of GPLv3; I don't think this is feasible in our case. Barring that, we have been asked to get such a release out by end-of-July. I'm not certain whether 1.11 will be ready in time; in that case, we could probably issue a 1.10.3 with only the licensing change. Speaking of licensing changes, I don't see a specific exemption clause for linking wget with OpenSSL, which AIUI is licensed under a GPL-incompatible license. Perhaps now would be a good time to specifically allow linking with OpenSSL? Mauro, I'd appreciate it if you'd get in touch with me as soon as possible; I've been trying to contact you, but fear that perhaps I'm falling into your spam bucket. Please ensure that you can receive messages from this address (which are frequently sent from unrelated domains, such as sbcglobal.net), and send me a note; there are a number of administrative and project details that I need clarified. - -- Micah J. Cowan Programmer, musician, typesetting enthusiast, gamer... http://micah.cowan.name/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGgXgf7M8hyUobTrERCAmlAJ9RWAP0VCUv6oThKUNDiTlLMKOd4wCgkqJk yqOyWy0QDIAg8An/9br44M4= =3XhO -END PGP SIGNATURE-
Re: New wget maintainer
On Tue, 26 Jun 2007, Micah Cowan wrote: The GNU Project has appointed me as the new maintainer for wget Welcome! Speaking of licensing changes, I don't see a specific exemption clause for linking wget with OpenSSL See the end of the README.
Re: New wget maintainer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel Stenberg wrote: On Tue, 26 Jun 2007, Micah Cowan wrote: The GNU Project has appointed me as the new maintainer for wget Welcome! Speaking of licensing changes, I don't see a specific exemption clause for linking wget with OpenSSL See the end of the README. Doh! Thanks! :) - -- Micah J. Cowan Programmer, musician, typesetting enthusiast, gamer... http://micah.cowan.name/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGgXsV7M8hyUobTrERCBaLAJwKQGhGE+mGtZTbzdxni1uyCHT8DgCfZ5Ay a2YheSjCgKyYK8WbiwWsm6g= =gsBY -END PGP SIGNATURE-
Re: wget maintainer?
Am Freitag, den 15.06.2007, 16:18 -0500 schrieb Karl Berry: Hello Karl, Regrettably, Mauro has had to resign the maintainership of wget. Its sad to read this. Is there a reason why he didn't wrote it (or did I missed this mail)? thx. -- Noèl Köthe noel debian.org Debian GNU/Linux, www.debian.org signature.asc Description: Dies ist ein digital signierter Nachrichtenteil
wget maintainer?
Regrettably, Mauro has had to resign the maintainership of wget. (Of course, many thanks to him for his work, and at least as many thanks to Hrvoje for writing it in the first place.) I have asked a few people individually if they'd like to take over the package, but none has had time. Would anyone on this list feel that they have enough time and inclination to be the new maintainer? Please write me if you would like to volunteer. I'll post in various places if no one comes forward, but this seemed like the most likely place ... Thanks, Karl
[wget] maintainer
rms put this up last week quoted from: http://www.gnu.org/help/help.html How to Help the GNU Project This list is ordered roughly with the more urgent items near the top. Please note that many things on this list link to larger, expanded lists. * We are looking for new maintainers for these GNU packages (contact [EMAIL PROTECTED] if you'd like to volunteer): o GNU dumb o The Hyperbole GNU Emacs Package o GNU UnRTF o wget (which still has a maintainer, but he would like to step down)
