Re: Proposal: Addressing the term “meritocracy” in the governance statement

2018-06-04 Thread Henri Sivonen via governance
On Wed, May 30, 2018 at 12:51 PM, Patrick Finch wrote: > On 5/30/18 11:27 AM, Henri Sivonen wrote: > >> >> 1) Positive participation in an area of the project is generally a >> prerequisite for authority over that area of the project. We expect >> module owners t

Re: Proposal: Addressing the term “meritocracy” in the governance statement

2018-05-30 Thread Henri Sivonen via governance
better at of late is: 3) Authority in an area of the project should involve continued participation in that area of the project. (We now have the module owner emeritus status, which acknowledges past participation while withdrawing current a

Re: Usage of Differential Privacy & RAPPOR

2017-08-31 Thread Henri Sivonen via governance
checkbox implies an admission that the two are somehow of different impact.) -- Henri Sivonen hsivo...@hsivonen.fi https://hsivonen.fi/ ___ governance mailing list governance@lists.mozilla.org https://lists.mozilla.org/listinfo/governance

Re: Module proposal: Gecko C++/Rust usage, tools, and style

2016-04-26 Thread Henri Sivonen
cko. I'm OK with style owners who agree with the above. :-) (FWIW, I think it would be fine for snake_case to spill over to C++ code in Gecko, but I care more about keeping at least Rust code looking like normal Rust code.) -- Henri Sivonen hsivo

Re: Thunderbird, the future, mozilla-central and comm-central

2015-12-15 Thread Henri Sivonen
rectly in any of the next ten points which > almost all > mention "the internet". That confusion may in turn lead to some conflicts and > related > strong feelings based on related misunderstandings or widely differing > priorities. Indeed. -- Henri Sivonen hsivo...@hsivonen.fi https://hsivonen.fi/ ___ governance mailing list governance@lists.mozilla.org https://lists.mozilla.org/listinfo/governance

Re: Thunderbird, the future, mozilla-central and comm-central

2015-12-03 Thread Henri Sivonen
to using code from N1 in addition to applying to bundling GPG. > The Enigmail community is certainly important, but represents a small > fraction of our users, less than 5% certainly. Well, it could be larger if Thunderbird included the GPG and Enigmail functionality in the product its

Re: Thunderbird, the future, mozilla-central and comm-central

2015-12-03 Thread Henri Sivonen
ce. However, it's unlikely that Web Crypto will cater to the idiosyncrasies of OpenGPG and it's unlikely that you could implement the algorithms that OpenGPG requires but Web Crypto doesn't provide in JS without side channel problems. OTOH, compiling

Re: Revision to Privacy Principles

2014-08-08 Thread Henri Sivonen
(added) > New: Innovate multi-layered security controls and practices, many of which > are publicly verifiable by our global community. Looks like the transition from Old Sync to New Sync went in the wrong direction in the light of the principle of defense-in depth by opening up a new attack vector (see above). -- Henri Sivonen hsivo...@hsivonen.fi https://hsivonen.fi/ ___ governance mailing list governance@lists.mozilla.org https://lists.mozilla.org/listinfo/governance

Re: Creating a volunteer agreement

2014-08-08 Thread Henri Sivonen
tter that the draft that started this thread. Especially now that it's written not to look like a contract, please avoid titling this as an "agreement" and instead, please, involve it as "Stuff you should know" section in a larger body of content about how to get starte

Re: Creating a volunteer agreement

2014-08-08 Thread Henri Sivonen
ork to clue-in naive people who aren't seriously unreasonable. E.g.: "Note that as a volunteer contributor, you are not an empoyee or contractor of Mozilla and should not represent yourself as such. Please be sure to adhere to Mozilla's trademark policy https://www.mozilla.org/en-US/fo

Re: Mozilla and DRM

2014-05-22 Thread Henri Sivonen
On Thu, May 22, 2014 at 7:04 AM, Jim wrote: > On 2014-05-21 19:24, Henri Sivonen wrote: >> >> On Wed, May 21, 2014 at 8:30 AM, Jim wrote: >>> >>> The parts of an EME based media player not specified are implemented in >>> JS/HTML making it an obvious

Re: Mozilla and DRM

2014-05-22 Thread Henri Sivonen
m sure everyone will be happy if you inspect it > for that robustness. It seems that you are probably unfamiliar with the word "robustness" as a term-of-the-art in the DRM context. Robustness means the capacity of the DRM implementation to resist attempts by the end-user to examine or modify

Re: Mozilla and DRM

2014-05-21 Thread Henri Sivonen
s your TV and Chromecast then? If I didn't look at the From field of the message I'm replying to, I'd think I'm replying to Fred Andrews regarding his "IEME" on public-restrictedmedia. A position *identical* with yours has been discussed before. -- Henri Sivonen hsiv

Re: Mozilla and DRM

2014-05-20 Thread Henri Sivonen
elpful. The FAQ is out now, appended to the Hacks post: https://hacks.mozilla.org/2014/05/reconciling-mozillas-mission-and-w3c-eme/ -- Henri Sivonen hsivo...@hsivonen.fi https://hsivonen.fi/ ___ governance mailing list governance@lists.mozil

Re: Mozilla and DRM

2014-05-19 Thread Henri Sivonen
de. I'm not aware of how to do that convincingly with asm.js.) * The CDM needs to include an H.264 decoder. If the CDM is a JS program provided by the site, shipping an H.264 decoder becomes the site's problem. It's more convenient for streaming services to let Someone Else to

Re: Mozilla and DRM

2014-05-14 Thread Henri Sivonen
re likely that deployment will be driven by business requirements from suppliers (studios or record labels; yes, *subscription* music still comes under DRM). But still, indeed, it is possible that EME-style DRM ends up increasing the use of DRM compared to NPAPI-style DRM. We don't know yet. --

Re: Mozilla fiddles while Mozilla burns

2014-04-11 Thread Henri Sivonen
the archive ever since--since way before Google became a browser competitor of Mozilla. The forum is also available as a Mozilla-hosted mailing list that's two-way bridged to the Usenet group. Google additionally provides its own mailing list bridge for the Usenet group. -- Henri Sivonen hsi

Re: Goodbye Firefox and Mozilla!

2014-04-09 Thread Henri Sivonen
On Apr 9, 2014 5:46 AM, "Michael Connor" wrote: > Once again, if you have examples of people advocating for exclusionary or discriminatory practices in violation of the CPG, please give specifics. It’s hard to address things without knowing who said or did something that’s crossed the line. In t

Re: Mozilla has failed itself

2014-04-09 Thread Henri Sivonen
of Conduct violation. After all, the handful of tweets from Mozillians calling for Brendan to step down were clearly Code of Conduct violations. > Some of us, myself included, wish we'd been able to do more, for sure. Yes. -- Henri Sivonen hsivo...@hsivonen.fi https://hsivonen.fi/ ___

Re: DRM and Firefox OS

2014-01-20 Thread Henri Sivonen
plemented." I sure hope that some items on that list are on the level of "someone mentioned these" instead of being on the level of "going to be implemented". I'm particularly unhappy about items DRM2, DRM7 and DRM8. Furthermore,

Re: On architectural security as a strategy for making good on privacy promises

2013-06-09 Thread Henri Sivonen
n of Firefox Sync is advertised now, it would make sense to commit to PICL having the same level of security by default. -- Henri Sivonen hsivo...@hsivonen.fi http://hsivonen.iki.fi/ ___ governance mailing list governance@lists.mozilla.org https://

Re: Partially self-built Firefox OS (was: Re: Supported locales in Firefox OS and OEMs)

2013-01-23 Thread Henri Sivonen
p or Android Firefox, it's not a great > use of our time to commit to the same level of support for these sorts > of things. In the case of desktop and Android, the user can get Mozilla-built Firefox even if the user is running self-compiled ker

Partially self-built Firefox OS (was: Re: Supported locales in Firefox OS and OEMs)

2013-01-23 Thread Henri Sivonen
who have a self-built Gonk layer be able to subscribe to a Mozilla-provided Gecko layer update channel (i.e. run Mozilla-provided higher layers on top of an unofficial device adaptation)? -- Henri Sivonen hsivo...@iki.fi http://hsivonen.iki.fi/ ___ governan

Re: Mozilla's brand and distro-provided Firefox packages

2013-01-23 Thread Henri Sivonen
ization work for the download button...). Yes, Firefox is already the default on Ubuntu. Yes, changing the download pages would require work. And those two reasons may well be reasons enough not to bother. But I was asking about the additional reason about keeping the brand intact. Wha

Mozilla's brand and distro-provided Firefox packages

2013-01-23 Thread Henri Sivonen
package is already Firefox-branded and Mozilla seems to be OK with referring people to Android Market? -- Henri Sivonen hsivo...@iki.fi http://hsivonen.iki.fi/ ___ governance mailing list governance@lists.mozilla.org https://lists.mozilla.org/listinfo/governance

governance@lists.mozilla.org

2012-09-18 Thread Henri Sivonen
-contextual merit by the time of the decision.) -- Henri Sivonen hsivo...@iki.fi http://hsivonen.iki.fi/ ___ governance mailing list governance@lists.mozilla.org https://lists.mozilla.org/listinfo/governance

Re: Draft: Add-on Policies V2

2012-07-24 Thread Henri Sivonen
On Mon, Jul 23, 2012 at 10:40 AM, Henri Sivonen wrote: > I think we shouldn't be giving add-ons that circumvent our mechanism > like that the benefit of the doubt. Therefore, I suggest we eliminate > the doubt by making identifiers used by our implementation obviously > se

Re: Draft: Add-on Policies V2

2012-07-23 Thread Henri Sivonen
On Fri, Jul 20, 2012 at 9:31 PM, Kris Maglione wrote: > On 07/20/2012 06:33 AM, Henri Sivonen wrote: >> >> On Fri, Jul 20, 2012 at 2:27 AM, Jorge Villalobos >> wrote: >>> >>> * Add-ons must be installed either using the add-on install system or the >&

Re: Draft: Add-on Policies V2

2012-07-20 Thread Henri Sivonen
ntional. I don't see why we should give extension developers who violate the installation guideline in a way that looks intentional the benefit of the doubt and wait before blocklisting. -- Henri Sivonen hsivo...@iki.fi http://hsivonen.iki.fi/ ___