[Scons-dev] Migrate downloads from Sourceforge.net?

[Kenny, Jason L]

I believe if we sign the binaries SF cannot modify them.

Jason

-----Original Message-----
From: Scons-dev [mailto:scons-dev-bounces at scons.org] On Behalf Of Dirk Bächle
Sent: Thursday, June 18, 2015 1:11 PM
To: scons-dev at scons.org
Subject: Re: [Scons-dev] Migrate downloads from Sourceforge.net?

Hi,

On 18.06.2015 16:58, Bill Deegan wrote:
> All,
>
> Should we migrate off sourceforge.net <http://sourceforge.net> as download host?
> They're getting bad reputation for inserting crapware in their hosted windows installers..
>

I'm against panicking, and spreading further FUD. Do we have concrete evidence that the SCons Windows installers are actually affected?
Even if they are, we could still contact SourceForge and ask them to not do it...or then we'll migrate away.

But as far as I understood from pages like:

    https://news.ycombinator.com/item?id=6262347
    http://www.expertreviews.co.uk/software/1403408/the-beginning-of-the-end-for-crapware-installers
    https://notepad-plus-plus.org/news/notepad-plus-plus-leaves-sf.html

the owner of the project has to agree that SF wraps the downloads, and I don't think we've taken this step in the past, or have we?

SF just offers a whole lot of infrastructure (download, statistics, ...) for free, and a real alternative isn't really in sight. So we should try to stick with it. We can still offer the packages on bitbucket in parallel and point users (which might be concerned about SFs policies) to it. So it gets their choice, not ours...

Just my 2 cents.

Best regards,

Dirk

_______________________________________________
Scons-dev mailing list
Scons-dev at scons.org
https://pairlist2.pair.net/mailman/listinfo/scons-dev