[Qgis-psc] [SAC] Osgeo Code signing certificates

[Sandro Santilli]

On Wed, Apr 20, 2016 at 08:43:51AM +0200, Richard Duivenvoorde wrote:
> On 20-04-16 07:55, Sandro Santilli wrote:
> > Could OSGeo take an official position against this reduction of user
> > freedom when it comes to running an Apple system, and provide hints
> > to take back ownership of owned machines ?
> 
> Hi Sandro,
> 
> How would you see this 'official position'?
> An article on the osgeo.org frontpage?

Doesn't necessarely need to be on the frontpage, but
somewhere on the webpage, an article about what code signing
is, what does it mean for free software, how user can (or cannot)
determine who they trust and how to (once available) set OSGeo as
a trusted source.

> > And, as I suggested in another thread, _require_ the payment of a fee
> > for _downloading_ a signed binary ? The user would then be challenged
> > to either pay to keep using Gatekeeper or learn to kill it...
> 
> Well, personally I think that is a good idea: we can make two downloads:
> - 10 dollar for signed installer
> - free one (plus docs how to install!) for the unsigned one
> ( though we need two package processes then :-( )
> I'll put it on the agenda for next PSC meeting to discuss this

Thanks!

--strk;