Re: License Comparison: Qt and OpenSSL

2013-07-27 Thread Werner Koch
On Sat, 27 Jul 2013 19:22, r...@sixdemonbag.org said: > So it is: the Qt license has changed since I last looked at it. Good > for them! The OpenSSL/GPL conflict is real and has prevented software FWIW: KDE and QT use an exception to allowing linking agains OpenSSL: In addition, as a speci

Re: GoldBug.sf.net Message Encryption

2013-07-27 Thread Randolph D.
2013/7/28 Henry Hertz Hobbit > I need mail messages with bad > host names given in forward rather than backward notation to get > the mail message past the email scanner and to know if a given > message or file really did come from the sender / file dropper. > I don't have any problems giving th

Re: License violation: GoldBug

2013-07-27 Thread Henry Hertz Hobbit
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 If the licensing issues can be resolved GoldBug may be the only chance we have of getting people to use encryption in any form. I think it is time for attorneys to have their say. Ergo, GoldBug should have done this a little more transparently rathe

Re: License violation: GoldBug

2013-07-27 Thread Randolph D.
thanks for the your correction . 2013/7/27 Robert J. Hansen > On 7/27/2013 9:32 AM, Randolph D. wrote: > > what a nonsense, Qt is LGPL and so not GPL... > > So it is: the Qt license has changed since I last looked at it. Good > for them! The OpenSSL/GPL conflict is real and has prevented softwa

Re: License Comparison: Qt and OpenSSL

2013-07-27 Thread Robert J. Hansen
On 7/27/2013 9:32 AM, Randolph D. wrote: > what a nonsense, Qt is LGPL and so not GPL... So it is: the Qt license has changed since I last looked at it. Good for them! The OpenSSL/GPL conflict is real and has prevented software from being legally distributed in the past; I'm pleased to see that

Re: License Comparison: Qt and OpenSSL

2013-07-27 Thread Randolph D.
what a nonsense, Qt is LGPL and so not GPL , furthermore the derived product should not be GPL says the link, it is not about combing two lib. This is really license soldierness. If that is the only point people pick out this shows they are not open to new things nor do they ever understand, what i

Re: License violation: GoldBug

2013-07-27 Thread Larry Brower
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Perhaps you should just forward the information in a friendly manner to the legal departments of all the involved vendors :) On 07/27/2013 07:00 AM, Randolph D. wrote: > Does the friendly License Soldier speaks that OpenSSL is not > useable with Q

Re: License violation: GoldBug

2013-07-27 Thread Robert J. Hansen
On 7/27/2013 7:12 AM, Randolph D. wrote: > Hi Peter, see the libgcrypt shown with license here: > # e2e Encryption (PK over SSL: using libgcrypt with LGPLv2.1+ License). > https://sourceforge.net/projects/goldbug/?source=navbar > and I think further releases will show it of course with more > consi

Re: License violation: GoldBug

2013-07-27 Thread Randolph D.
Does the friendly License Soldier speaks that OpenSSL is not useable with Qt gui framework? 2013/7/27 Robert J. Hansen > > See, e.g., https://people.gnome.org/~markmc/openssl-and-the-gpl.html > > ___ Gnupg-users mailing list Gnupg-users@gnupg.org http

Re: License violation: GoldBug

2013-07-27 Thread Randolph D.
Hi Peter, see the libgcrypt shown with license here: # e2e Encryption (PK over SSL: using libgcrypt with LGPLv2.1+ License). https://sourceforge.net/projects/goldbug/?source=navbar and I think further releases will show it of course with more consideration of the used libs, What would the world be

Re: License violation: GoldBug

2013-07-27 Thread Peter Lebbing
On 27/07/13 12:45, Randolph D. wrote: > We all need to evaluate this and will come back to you > In case there is a file or txt missing, this have to be corrected. You're one of the devs of the project, or otherwise affiliated with it? Peter. -- I use the GNU Privacy Guard (GnuPG) in combinatio

Re: License violation: GoldBug

2013-07-27 Thread Robert J. Hansen
On 7/27/2013 6:45 AM, Randolph D. wrote: > learn to be patient, consider other opinons and dont be a Matador of > a shitstorm. Help People, and dont drop them down. I am helping people. I am helping innocent people by telling them that, in my experience as a professional software engineer with m

Re: License violation: GoldBug

2013-07-27 Thread Randolph D.
Thanks for the Information, Robert. We all need to evaluate this and will come back to you In case there is a file or txt missing, this have to be corrected. But personally I would give you the tip, as you said this is not the right list to discuss this and you yourself are mostly posting about it,

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Randolph D.
Hi Robert, good Point, scalebility if of course the Thing to consider in architecture, there is the congestion check box in the library, which seems to be hidden in the app this helps to set up a Service for better scalability. In General you are right, but the model could be as well: 5000 Users co

License violation: GoldBug

2013-07-27 Thread Robert J. Hansen
Product: GoldBug Instant Messenger (http://goldbug.sf.net) Version: 0.1.1567RC Platform: Win32 GoldBug Instant Messenger distributes portions of libgcrypt as part of its package, under the name "libspoton". However, it claims to be fully BSD licensed, which means it has relicensed libgcrypt in vi

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Randolph D.
Hi Caro and Robert, yah we should do this. I had a Brief look now, I think it is a RSA generated, which decrypts the message, then like in PGP the encryption is combined with an AES in the same envelope, all is Baseto64 and then a session AES key is generated, third all is sent over SSL. So you hav

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Robert J. Hansen
On 7/27/2013 5:57 AM, Randolph D. wrote: > In General you are right, but the model could be as well: 5000 Users > connect to one Server, this Server provides the Chat for These peope. Then it's even a less competent design. A single server is a single point of failure -- also a single point to is

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Caro
Well, as I can't find a statement neither of the EFF nor of the CCC related to this program, instead found a review [1] on sourceforge which indicates that the CCC has no idea of it, I'm highly sceptical about this. It does not have to be a a bad software, though. But picking big names to push for

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Robert J. Hansen
On 7/27/2013 6:00 AM, Randolph D. wrote: > the hemlis mobile could be based on the code, right? i think the Teams > are in a Close connection Anything's possible, but there's no evidence to support either of your statements. This is also getting increasingly off-topic for GnuPG-Users, since GoldB

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Randolph D.
the hemlis mobile could be based on the code, right? i think the Teams are in a Close connection For a mobile solution there is of course a Qt android compile of the Gold Bug needed, Instead of looking at Websites, can you Martin compile it for the mobile android solution? then Hemlis and team deve

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread 32bitfl...@posteo.de
Well, as I can't find a statement neither of the EFF nor of the CCC related to this program, instead found a review on sourceforge which indicates that the CCC has no idea of it, I'm highly sceptical about this. It does not ha

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Martin
Wow that landing page looks like a super cheap rip-off of http://heml.is/... On Sat, Jul 27, 2013 at 4:25 PM, Robert J. Hansen wrote: > On 7/26/2013 10:45 PM, Randolph D. wrote: > > Does anyone know, if this tool is really secure? > > Based only on their press release, this seems like a complete

Re: Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Robert J. Hansen
On 7/26/2013 10:45 PM, Randolph D. wrote: > Does anyone know, if this tool is really secure? Based only on their press release, this seems like a completely unscalable bucket of failure. > The so called "Echo" creates a peer-2-peer (p2p), respective > friend-2-friend (f2f) network, which sends ev

Fwd: Goldbug.sf.net - Secure Multi-Crypto-Messenger v0.1 released

2013-07-27 Thread Randolph D.
Does anyone know, if this tool is really secure? Fwd: >>> DOWNLOAD & PRESS RELEASE 2013-07-27 - English / Deutsch weiter unten _ _ _ / | | | | | _ \ | | __ ___ | | __| | |_) |_ _ __ _ | | |_ |/ _ \| |/ _` | _ <| | | |/ _` | | |__| | (_) | | (_| | |_) | |