forge vs gitolite (Re: CTI - Making a decision for glibc.)

[Andreas K. Huettel]

Am Mittwoch, 4. Februar 2026, 08:45:07 Mitteleuropäische Normalzeit schrieb Alexandre Oliva:
> 
> When you ssh into Savannah, you're presumably engaged in GNU Project's
> computing.  So it's reasonable for the GNU Project to have control over
> that computing.  So it's not objectionable, freedom wise, that they
> choose (or can't help) to keep running an old version of ssh on their
> end.  It's also unfortunate that this requires you to keep a weak key on
> your computers.  But it is their prerogative to decide what to run on
> their servers, under their control.  Just as it is your prerogative to
> decide what to install on yours.  Depending on decisions from both
> parties, you may or may not be able to interact.
> 

If the GNU Project has the freedom to run old version of ssh, then the
GPL luckily also provides the freedom to take a project elsewhere.
How about defending that freedom instead?

Sorry, but I'm getting seriously annoyed at the tetrapilotomy, and the
ideological discussions do *not* help the point of sourceware.

Here's an ELI5 version:

* Security-relevant world-facing software is outdated = BAD

* Not supporting the update because, uhm, ideology = WORSE

-- 
Andreas K. Hüttel
dilfridge@gentoo.org
Gentoo Linux developer
(council, toolchain, base-system, perl, libreoffice)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1018 bytes
Desc: This is a digitally signed message part.
URL: <https://sourceware.org/pipermail/libc-alpha/attachments/20260204/43c53b9c/attachment.sig>