On Wednesday 10 December 2008 15:56:02 Tom "spot" Callaway wrote:
On Wed, 2008-12-10 at 10:20 +0100, Ciaran Farrell wrote:
I think it would make sense to coordinate our efforts here - openSUSE and Fedora want to distribute the CaCert.org root certs and we are both unhappy with the current terms of distribution.
So, given that Fedora has two classes of licensing (Code and Content) and that these CaCert.org root certs would safely fall into the Content category, we really only need permission to copy and redistribute the root certs without restriction. We don't need the right to modify them.
I'm not sure how their private keys come into this, are they distributing them for some odd reason?
Sorry, I should have been more clear about this. One of the discussion points was that the CaCert people were worried about liability if their private key were somehow to be compromised. They were therefore seeking to force end users to accept some type of disclaimer. To do this, they wanted distributors to write it directly into the EULA/SLA.
Ciaran
@spot - if you like, I'll forward you our correspondence with the cacert people thus far.
Sure, thanks!
~spot