Hi > Now you're comparing ClamAV to close source software where > such a model is easy and painless.
And you are misunderstanding him. He voted for distinction between engine and host software. Which I think is really a great idea (not a new one though). > Show us an open-source security _software_ (and not Linux > distributions, > etc.) which serves binary updates to its users. This is not about serving binaries, this is about serving separated compile packages for engine and other software parts. Image having the engine (using some very well defined api) in a separate dll/so. Updates could be installed by copying the dll/so to the target systems and restarting the service. So, it might be a good idea to be able to update that file with freshclam. It needn't be your servers, but could be local company servers, which deliver the new binary and all company systems could be updates automatically. And even if it is uncommon, it might not be such a bad idea to provide such updates on clamav.net. Not at the cost of not providing the source code, but as a quick way to update clamav for those users that trust you. (digital signatures to prevent hackers highjacking your server from deploying viruses through frashclam unattended would make sense here...) Regards, Steffen
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html