On Wed, May 30, 2018 at 12:51 PM, Patrick Finch wrote:
> On 5/30/18 11:27 AM, Henri Sivonen wrote:
>
>>
>> 1) Positive participation in an area of the project is generally a
>> prerequisite for authority over that area of the project. We expect
>> module owners t
better at of late is:
3) Authority in an area of the project should involve continued
participation in that area of the project. (We now have the module
owner emeritus status, which acknowledges past participation while
withdrawing current a
checkbox implies an admission that the
two are somehow of different impact.)
--
Henri Sivonen
hsivo...@hsivonen.fi
https://hsivonen.fi/
___
governance mailing list
governance@lists.mozilla.org
https://lists.mozilla.org/listinfo/governance
cko.
I'm OK with style owners who agree with the above. :-)
(FWIW, I think it would be fine for snake_case to spill over to C++
code in Gecko, but I care more about keeping at least Rust code
looking like normal Rust code.)
--
Henri Sivonen
hsivo
rectly in any of the next ten points which
> almost all
> mention "the internet". That confusion may in turn lead to some conflicts and
> related
> strong feelings based on related misunderstandings or widely differing
> priorities.
Indeed.
--
Henri Sivonen
hsivo...@hsivonen.fi
https://hsivonen.fi/
___
governance mailing list
governance@lists.mozilla.org
https://lists.mozilla.org/listinfo/governance
to using code
from N1 in addition to applying to bundling GPG.
> The Enigmail community is certainly important, but represents a small
> fraction of our users, less than 5% certainly.
Well, it could be larger if Thunderbird included the GPG and Enigmail
functionality in the product its
ce. However, it's unlikely that Web Crypto will cater to
the idiosyncrasies of OpenGPG and it's unlikely that you could
implement the algorithms that OpenGPG requires but Web Crypto doesn't
provide in JS without side channel problems. OTOH, compiling
(added)
> New: Innovate multi-layered security controls and practices, many of which
> are publicly verifiable by our global community.
Looks like the transition from Old Sync to New Sync went in the wrong
direction in the light of the principle of defense-in depth by opening
up a new attack vector (see above).
--
Henri Sivonen
hsivo...@hsivonen.fi
https://hsivonen.fi/
___
governance mailing list
governance@lists.mozilla.org
https://lists.mozilla.org/listinfo/governance
tter that the draft that started this thread.
Especially now that it's written not to look like a contract, please
avoid titling this as an "agreement" and instead, please, involve it
as "Stuff you should know" section in a larger body of content about
how to get starte
ork to clue-in naive
people who aren't seriously unreasonable. E.g.: "Note that as a
volunteer contributor, you are not an empoyee or contractor of Mozilla
and should not represent yourself as such. Please be sure to adhere to
Mozilla's trademark policy
https://www.mozilla.org/en-US/fo
On Thu, May 22, 2014 at 7:04 AM, Jim wrote:
> On 2014-05-21 19:24, Henri Sivonen wrote:
>>
>> On Wed, May 21, 2014 at 8:30 AM, Jim wrote:
>>>
>>> The parts of an EME based media player not specified are implemented in
>>> JS/HTML making it an obvious
m sure everyone will be happy if you inspect it
> for that robustness.
It seems that you are probably unfamiliar with the word "robustness"
as a term-of-the-art in the DRM context. Robustness means the capacity
of the DRM implementation to resist attempts by the end-user to
examine or modify
s
your TV and Chromecast then?
If I didn't look at the From field of the message I'm replying to, I'd
think I'm replying to Fred Andrews regarding his "IEME" on
public-restrictedmedia. A position *identical* with yours has been
discussed before.
--
Henri Sivonen
hsiv
elpful.
The FAQ is out now, appended to the Hacks post:
https://hacks.mozilla.org/2014/05/reconciling-mozillas-mission-and-w3c-eme/
--
Henri Sivonen
hsivo...@hsivonen.fi
https://hsivonen.fi/
___
governance mailing list
governance@lists.mozil
de. I'm not aware of how to do
that convincingly with asm.js.)
* The CDM needs to include an H.264 decoder. If the CDM is a JS
program provided by the site, shipping an H.264 decoder becomes the
site's problem. It's more convenient for streaming services to let
Someone Else to
re likely that
deployment will be driven by business requirements from suppliers
(studios or record labels; yes, *subscription* music still comes under
DRM). But still, indeed, it is possible that EME-style DRM ends up
increasing the use of DRM compared to NPAPI-style DRM. We don't know
yet.
--
the archive ever since--since way
before Google became a browser competitor of Mozilla. The forum is
also available as a Mozilla-hosted mailing list that's two-way bridged
to the Usenet group. Google additionally provides its own mailing list
bridge for the Usenet group.
--
Henri Sivonen
hsi
On Apr 9, 2014 5:46 AM, "Michael Connor" wrote:
> Once again, if you have examples of people advocating for exclusionary or
discriminatory practices in violation of the CPG, please give specifics.
It’s hard to address things without knowing who said or did something
that’s crossed the line.
In t
of Conduct violation. After all, the handful of tweets from Mozillians
calling for Brendan to step down were clearly Code of Conduct
violations.
> Some of us, myself included, wish we'd been able to do more, for sure.
Yes.
--
Henri Sivonen
hsivo...@hsivonen.fi
https://hsivonen.fi/
___
plemented."
I sure hope that some items on that list are on the level of "someone
mentioned these" instead of being on the level of "going to be
implemented". I'm particularly unhappy about items DRM2, DRM7 and
DRM8. Furthermore,
n of Firefox Sync is advertised now,
it would make sense to commit to PICL having the same level of
security by default.
--
Henri Sivonen
hsivo...@hsivonen.fi
http://hsivonen.iki.fi/
___
governance mailing list
governance@lists.mozilla.org
https://
p or Android Firefox, it's not a great
> use of our time to commit to the same level of support for these sorts
> of things.
In the case of desktop and Android, the user can get Mozilla-built
Firefox even if the user is running self-compiled ker
who have a self-built Gonk layer be able to subscribe to
a Mozilla-provided Gecko layer update channel (i.e. run
Mozilla-provided higher layers on top of an unofficial device
adaptation)?
--
Henri Sivonen
hsivo...@iki.fi
http://hsivonen.iki.fi/
___
governan
ization work for the download button...).
Yes, Firefox is already the default on Ubuntu. Yes, changing the
download pages would require work. And those two reasons may well be
reasons enough not to bother.
But I was asking about the additional reason about keeping the brand
intact. Wha
package is already Firefox-branded and Mozilla seems to be OK with
referring people to Android Market?
--
Henri Sivonen
hsivo...@iki.fi
http://hsivonen.iki.fi/
___
governance mailing list
governance@lists.mozilla.org
https://lists.mozilla.org/listinfo/governance
-contextual merit by the time of the decision.)
--
Henri Sivonen
hsivo...@iki.fi
http://hsivonen.iki.fi/
___
governance mailing list
governance@lists.mozilla.org
https://lists.mozilla.org/listinfo/governance
On Mon, Jul 23, 2012 at 10:40 AM, Henri Sivonen wrote:
> I think we shouldn't be giving add-ons that circumvent our mechanism
> like that the benefit of the doubt. Therefore, I suggest we eliminate
> the doubt by making identifiers used by our implementation obviously
> se
On Fri, Jul 20, 2012 at 9:31 PM, Kris Maglione wrote:
> On 07/20/2012 06:33 AM, Henri Sivonen wrote:
>>
>> On Fri, Jul 20, 2012 at 2:27 AM, Jorge Villalobos
>> wrote:
>>>
>>> * Add-ons must be installed either using the add-on install system or the
>&
ntional. I don't see why we
should give extension developers who violate the installation
guideline in a way that looks intentional the benefit of the doubt and
wait before blocklisting.
--
Henri Sivonen
hsivo...@iki.fi
http://hsivonen.iki.fi/
___
29 matches
Mail list logo