Relaxing the need for copyright assignments

Vladimir 'φ-coder/phcoder' Serbinenko phcoder at
Thu Apr 12 12:01:36 CEST 2012

On 12.04.2012 11:49, Werner Koch wrote:
>   license; thus we can't accept any code under the LGPLv2(only).
LGPLv2-only is compatible with GPLv2+ and GPLv3+:

> I pondered with the idea of requiring OpenPGP signed statements but
rejected it. They don't gain much unless we want to establish another
complicated procedure to check the trustworthiness of the key. Even if
we would do so, we will have no way to check the provenience of the
submitted code.

This could allow to check that noone attempts to impersonate an already
known contributor. While legally having almost no effect it may have
other advantages like enhancing code trustworthiness if it comes from
well-known contributor but it doesn't replace the code review.

Vladimir 'φ-coder/phcoder' Serbinenko

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 294 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20120412/8b21dee3/attachment.pgp>

More information about the Gcrypt-devel mailing list