Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-10-29 Thread Ben Laurie
"William H. Geiger III" wrote: > >What they _should_ do is use OpenSSL and work on that, instead of > >reinventing the wheel. > > IIRC the OpenSSL project was not accepting code from US sources. Has this policy >changed? Hmmm. Weeding out cruft from my mailbox and I found this. Looks like I did

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread William Allen Simpson
-BEGIN PGP SIGNED MESSAGE- Now, I didn't start this thread to argue about licenses. I just wanted folks to review code, should they be so inclined. So, this is my last comment. Sorry that someone took umbrage. Ben Laurie wrote: > > William Allen Simpson wrote: > > I was not aware t

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread Rich Salz
> the OpenSSL project was not accepting code from US sources. Has this policy changed? Yes. The various members of the openssl-core team either agree that the current regulations remove their concern; or feel that even though there are issues it's not worth dealing with now US co

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread William H. Geiger III
In <[EMAIL PROTECTED]>, on 09/18/00 at 02:09 PM, Ben Laurie <[EMAIL PROTECTED]> said: >William Allen Simpson wrote: >> >> Fallout from the early RSA release into public domain, the references >> to BSAFE have been replaced, and a bunch of stuff are GPL. Is there >> a team of folks doing ind

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread Ben Laurie
William Allen Simpson wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Ben Laurie wrote: > > > > As far as I can tell, the problems are invented rather than real. At > > least I can't recall any real problems except "it isn't the licence we > > want it to be". > > > I was not aware that OpenSSL

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread William Allen Simpson
-BEGIN PGP SIGNED MESSAGE- Ben Laurie wrote: > > As far as I can tell, the problems are invented rather than real. At > least I can't recall any real problems except "it isn't the licence we > want it to be". > I was not aware that OpenSSL had changed to be compatible with GPL. And I

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread Jeffrey Altman
Would you elaborate on the problems with the OpenSSL license? > I remember you expressing such sentiments on the mozilla security list some > months ago. But, there are problems with the OpenSSL license. And not > enough crossplatform support. And, I'm a big believer in multiple > independent

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread Ben Laurie
William Allen Simpson wrote: > > -BEGIN PGP SIGNED MESSAGE- > > I remember you expressing such sentiments on the mozilla security list some > months ago. But, there are problems with the OpenSSL license. As far as I can tell, the problems are invented rather than real. At least I can't

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread Enzo Michelangeli
ssage - From: "Ben Laurie" <[EMAIL PROTECTED]> To: "William Allen Simpson" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, September 19, 2000 4:09 Subject: Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release] > William Allen Simpson wrote: > >

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-19 Thread William Allen Simpson
-BEGIN PGP SIGNED MESSAGE- I remember you expressing such sentiments on the mozilla security list some months ago. But, there are problems with the OpenSSL license. And not enough crossplatform support. And, I'm a big believer in multiple independent implementations. Ben Laurie wrote:

Re: [Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-18 Thread Ben Laurie
William Allen Simpson wrote: > > Fallout from the early RSA release into public domain, the references > to BSAFE have been replaced, and a bunch of stuff are GPL. Is there > a team of folks doing independent code review? > > Since this is likely to show up on a lot of systems, and any bugs > w

[Fwd: [ANNOUNCE] NSS 3.1 Beta 1 Release]

2000-09-18 Thread William Allen Simpson
Fallout from the early RSA release into public domain, the references to BSAFE have been replaced, and a bunch of stuff are GPL. Is there a team of folks doing independent code review? Since this is likely to show up on a lot of systems, and any bugs will plague us for a long time, this see