<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" data-hsystem="true"></head>
<body><style>p{margin: 0;padding: 0;}
</style>
<p>Hi All -</p>
<p> </p>
<p> thank you to the new Board facing a list of things to attend to..</p>
<p> </p>
<p>I have to say that the motion as worded is avoiding a crucial component, and
that is, who are the vendors involved, and who "owns" the right to validate the
authenticity of a cert.</p>
<p>The dysfunction in the current cert ecosystem is well-known, so I am not
naively suggesting that there is a simple fix. However, it is important to know,
as a dot-org representing FOSS, who cert authority is being purchased from, and
what that means.</p>
<p> </p>
<p> best regards from Berkeley, California</p>
<p> Brian M Hamlin</p>
<p> </p>
<p><br>On Thu, 15 Oct 2015 09:11:48 -0700, Jody Garnett
<jody.garnett@gmail.com> wrote:</p>
<blockquote style="border-left: 2px solid #000000; padding-right: 0px;
padding-left: 5px; margin-left: 5px; margin-right: 0px;">
<div id="html-message">
<div>Today's board meeting had the following agenda topic:
<div> </div>
<div>
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex;
border-left-width: 1px; border-left-color: #cccccc; border-left-style: solid;
padding-left: 1ex;">
<ul style="line-height: 1.5em; list-style-type: square; margin: 0.3em 0px 0px
1.5em; padding: 0px; color: #000000; font-family: sans-serif; font-size:
13px;"><li style="margin-bottom: 0.1em;">discuss possibility of OSGeo software
signing certificates [Anita] (i.e. OSX seems to not allow installation of
unsigned software by default --> user needs to change configuration -->
signed software would appear more professional. On the QGIS mailing list, we
were discussing that we could have a QGIS.org certificate but since QGIS depends
on so many other OSGeo tools - which would also have to be signed - it might be
more appropriate to have an OSGeo certificate.)</li>
</ul>
</blockquote>
<div><span style="color: #000000; font-family: sans-serif;"> </span>
</div>
<div><span style="color: #000000; font-family: sans-serif;">Moving discussion
here to the mailing list, and will make the motion tomorrow.</span>
</div>
<div> </div>
<div><span style="color: #000000; font-family: sans-serif;">As this is the OSGeo
board mailing list I would like to keep the technical details of signing to a
minimum and focus on our role in supporting the QGIS project.</span>
</div>
<div><span style="color: #000000; font-family: sans-serif;"> </span>
</div>
<div><span style="color: #000000; font-family: sans-serif;">We are focused on a
very clear question - can OSGeo obtaining a certificate for use by OSGeo
projects. The cost appears to be nominal (one <a href="https://www.digicert.com/code-signing/" target="">quote</a> is
$160/yearly).</span>
</div>
<div><span style="color: #000000; font-family: sans-serif;"> </span>
</div>
<div><span style="color: #000000; font-family: sans-serif;">I view this as an
appropriate use of the OSGeo branding and well within our capacity as an
organization.</span>
</div>
<div>
<div class="gmail_signature">
<div>
<div>
<div>
<div>--</div>
<div>Jody Garnett</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br><hr>
<br> _______________________________________________<br> Board mailing list<br>
Board@lists.osgeo.org<br><a href="../hwebmail/services/go.php?url=http%3A%2F%2Flists.osgeo.org%2Fmailman%2Flistinfo%2Fboard" target="_blank">http://lists.osgeo.org/mailman/listinfo/board</a>
</blockquote>
<p><br><br></p>
<p><br> --<br>Brian M Hamlin<br> OSGeo California Chapter<br>
blog.light42.com<br></p>
<p> </p>
</body>
</html>