Hi

> Now you're comparing ClamAV to close source software where 
> such a model is easy and painless.

And you are misunderstanding him.
He voted for distinction between engine and host software.
Which I think is really a great idea (not a new one though).

> Show us an open-source security _software_ (and not Linux 
> distributions,
> etc.) which serves binary updates to its users.

This is not about serving binaries, this is about serving separated compile
packages for engine and other software parts.
Image having the engine (using some very well defined api) in a separate
dll/so.
Updates could be installed by copying the dll/so to the target systems and
restarting the service.

So, it might be a good idea to be able to update that file with freshclam.
It needn't be your servers, but could be local company servers, which
deliver the new binary and all company systems could be updates
automatically.

And even if it is uncommon, it might not be such a bad idea to provide such
updates on clamav.net. Not at the cost of not providing the source code, but
as a quick way to update clamav for those users that trust you. (digital
signatures to prevent hackers highjacking your server from deploying viruses
through frashclam unattended would make sense here...)

Regards,
  Steffen

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to