<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>LocationTech says in their handbook</div><div><br></div><div><div class="sect2" style="box-sizing: border-box; margin: 0px; padding: 0px; direction: ltr; color: rgb(34, 34, 34); font-family: 'Helvetica Neue', Helvetica, Helvetica, Arial, sans-serif; font-size: 15px; line-height: 15px; widows: 1; background-color: rgb(255, 255, 255);"><div class="sect3" style="box-sizing: border-box; margin: 0px; padding: 0px; direction: ltr;"><h4 id="resources-signing" style="box-sizing: border-box; margin: 0.2em 0px 0.5em; padding: 0px; direction: ltr; font-family: helvetica, arial, freesans, clean, sans-serif; color: rgb(51, 51, 51); text-rendering: optimizelegibility; line-height: 1.4; font-size: 1em;">Signed Artifacts</h4><div class="paragraph" style="box-sizing: border-box; margin: 0px; padding: 0px; direction: ltr;"><p style="box-sizing: border-box; margin: 0px 0px 1em; padding: 0px; direction: ltr; font-family: helvetica, arial, freesans, clean, sans-serif; font-size: 1em; line-height: 1.4; text-rendering: optimizelegibility;">Where technically sensible, all downloadable artifacts should be <a href="https://wiki.eclipse.org/JAR_Signing" style="box-sizing: border-box; color: rgb(65, 131, 196); text-decoration: none; line-height: inherit; background: transparent;">signed</a> by an Eclipse Foundation-provided certificate.</p></div></div></div><div class="sect2" style="box-sizing: border-box; margin: 0px; padding: 0px; direction: ltr; color: rgb(34, 34, 34); font-family: 'Helvetica Neue', Helvetica, Helvetica, Arial, sans-serif; font-size: 15px; line-height: 15px; widows: 1; background-color: rgb(255, 255, 255);"></div></div><div><br></div><div><a href="http://www.eclipse.org/projects/handbook/locationtech.html">http://www.eclipse.org/projects/handbook/locationtech.html</a></div><div><br></div><div>Mike</div><div><br></div><div><div><div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Michael Smith</font></font></div><div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">OSGeo Foundation Treasurer</font></font></div><div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">treasurer@osgeo.org</font></font></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Sanghee Shin <<a href="mailto:shshin@gaia3d.com">shshin@gaia3d.com</a>><br><span style="font-weight:bold">Date: </span> Thursday, October 15, 2015 at 4:10 PM<br><span style="font-weight:bold">To: </span> Michael Smith <<a href="mailto:michael.smith.erdc@gmail.com">michael.smith.erdc@gmail.com</a>><br><span style="font-weight:bold">Cc: </span> Sanghee Shin <<a href="mailto:shshin@gaia3d.com">shshin@gaia3d.com</a>>, Anita Graser <<a href="mailto:anitagraser@gmx.at">anitagraser@gmx.at</a>>, Jody Garnett <<a href="mailto:jody.garnett@gmail.com">jody.garnett@gmail.com</a>>, "<a href="mailto:board@lists.osgeo.org">board@lists.osgeo.org</a>" <<a href="mailto:board@lists.osgeo.org">board@lists.osgeo.org</a>><br><span style="font-weight:bold">Subject: </span> Re: [Board] [EXTERNAL] Re: OSGeo signing certificates (discussion)<br></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div><meta http-equiv="Content-Type" content="text/html charset=utf-8"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Hi all, </div><div class=""><br class=""></div>I totally agree with Mike. And I just wonder if there’s any similar case from other open source communities.<div class=""><br class=""></div><div class="">Best regards, </div><div class=""><br class=""><div apple-content-edited="true" class="">
신상희<br class="">---<br class="">Shin, Sanghee<br class="">Gaia3D, Inc. - The GeoSpatial Company<br class=""><a href="http://www.gaia3d.com" class="">http://www.gaia3d.com</a>
</div><br class=""><div><blockquote type="cite" class=""><div class="">2015. 10. 15., 오후 8:48, Michael Smith <<a href="mailto:michael.smith.erdc@gmail.com" class="">michael.smith.erdc@gmail.com</a>> 작성:</div><br class="Apple-interchange-newline"><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif;" class=""><div class="">I think this makes a lot of sense and its very much a part of our mission statement to provide the foundational/infrastructure pieces for projects.</div><div class=""><br class=""></div><div class="">And I concur that this should be at the OSGeo level, not at the project level.</div><div class=""><br class=""></div><div class="">Mike</div><div class=""><br class=""></div><div class=""><div class=""><div class=""><font class="Apple-style-span"><font class="Apple-style-span" face="Calibri">Michael Smith</font></font></div><div class=""><font class="Apple-style-span"><font class="Apple-style-span" face="Calibri">OSGeo Foundation Treasurer</font></font></div><div class=""><font class="Apple-style-span"><font class="Apple-style-span" face="Calibri"><a href="mailto:treasurer@osgeo.org" class="">treasurer@osgeo.org</a></font></font></div></div></div><div class=""><br class=""></div><span id="OLK_SRC_BODY_SECTION" class=""><div style="font-family: Calibri; font-size: 11pt; text-align: left; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);" class=""><span style="font-weight:bold" class="">From: </span> Board <<a href="mailto:board-bounces@lists.osgeo.org" class="">board-bounces@lists.osgeo.org</a>> on behalf of Anita Graser <<a href="mailto:anitagraser@gmx.at" class="">anitagraser@gmx.at</a>><br class=""><span style="font-weight:bold" class="">Date: </span> Thursday, October 15, 2015 at 1:46 PM<br class=""><span style="font-weight:bold" class="">To: </span> Jody Garnett <<a href="mailto:jody.garnett@gmail.com" class="">jody.garnett@gmail.com</a>><br class=""><span style="font-weight:bold" class="">Cc: </span> "<a href="mailto:board@lists.osgeo.org" class="">board@lists.osgeo.org</a>" <<a href="mailto:board@lists.osgeo.org" class="">board@lists.osgeo.org</a>><br class=""><span style="font-weight:bold" class="">Subject: </span> [EXTERNAL] Re: [Board] OSGeo signing certificates (discussion)<br class=""><span style="font-weight:bold" class="">Resent-From: </span> Michael Smith <<a href="mailto:michael.smith@usace.army.mil" class="">michael.smith@usace.army.mil</a>><br class=""></div><div class=""><br class=""></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;" class="" type="cite"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div class=""><div dir="ltr" class=""><div class="gmail_default" style="font-size:small"><br class=""></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Thu, Oct 15, 2015 at 6:49 PM, Jody Garnett <span dir="ltr" class="">
<<a href="mailto:jody.garnett@gmail.com" target="_blank" class="">jody.garnett@gmail.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex" type="cite"><div dir="ltr" class="">Thanks, could the boardwalk with the SAC to obtain a useful certificate? For this discussion/motion I am seeking the direction "this is something we should do" from the board.</div></blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex" type="cite"><div dir="ltr" class=""><div class="">I am in a small conflict of interest here as a "community lead" at boundless we have also offered to sign bundles as a member of the QGIS community. The board could also ask the qgis non-profit to obtain a certificate and sign, but I would prefer if we
stick with the OSGeo branding (which helps many more projects then just QGIS).</div></div></blockquote><div class=""><br class=""></div><div class=""><div class="gmail_default">One example where an OSGeo certificate would make much more sense than separate ones is the QGIS Mac KyngChaos installer. (Pretty much quoting my colleague Richard D. here.) Since William prefers to package the dependencies separately,
it would seem quite awkward to sign, e.g. GDAL with the <a href="http://qgis.org" class="">QGIS.org</a> certificate. A general OSGeo certificate would seem appropriate. I assume the same might be the case sooner or later for the OSGeo4W installer.</div><div class="gmail_default"><br class=""></div><div class="gmail_default">Best wishes,</div><div class="gmail_default">Anita</div></div><div class="gmail_default"><br class=""></div></div><br class=""></div></div></div></div></blockquote></span></div>
_______________________________________________<br class="">Board mailing list<br class=""><a href="mailto:Board@lists.osgeo.org" class="">Board@lists.osgeo.org</a><br class=""><a href="http://lists.osgeo.org/mailman/listinfo/board">http://lists.osgeo.org/mailman/listinfo/board</a></div></blockquote></div><br class=""></div></div></div></blockquote></span></body></html>