|
Authored by: jbb on Friday, July 06 2012 @ 11:18 PM EDT |
You seem to be saying that any creator or distributor of GPL-3 software, if they
ever sign the software they release, could be put in a position (by a malicious
person downstream) where they are forced to divulge their private signing
keys.
A malicious person, only using the public key, could always concoct a
machine where a particular piece of GPL-3 software won't load unless it was
signed by the private key of the creator/distributor.
Forcing people
upstream to release their private keys this way makes no sense. The absurdity
stems from the fact that you think people upstream can be held liable for the
actions of people downstream. This is anti-GPL FUD.
--- Our job is
to remind ourselves that there are more contexts
than the one we’re in now — the one that we think is reality.
-- Alan Kay [ Reply to This | Parent | # ]
|
|
|
|
|