You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@roller.apache.org by Dave <sn...@gmail.com> on 2008/05/17 18:34:02 UTC
DRAFT May 2008 Apache Roller board report
Here's what I have so far: http://cwiki.apache.org/confluence/x/1E4B
Feedback is welcome but I need to submit the report this weekend.
Sorry for the late notice.
- Dave
Re: DRAFT May 2008 Apache Roller board report
Posted by Matt Raible <mr...@gmail.com>.
Is "commons-codec" good enough? That's what we use to encrypt password
in Acegi/Spring Security.
Matt
On Sat, May 17, 2008 at 12:24 PM, Craig L Russell <Cr...@sun.com> wrote:
> Hi Dave,
>
> The board reports for Feb [1] and Mar [2] 2008 have lots of examples.
>
> See the mail with subject "[ALL PMC CHAIRS] Export Notification policy" for
> details of what's needed. Basically, if there is any code in Roller that
> either implements encryption or uses encryption features of a third party
> library, then Roller needs to declare itself to use encryption technology.
>
> If it can't be done by Monday, should put into the board report something
> like "Export Notification policy review is underway" and then underway it.
>
> OpenJPA doesn't use encryption technology and reported this in April.
>
> Craig
>
> [1]
> http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_02_20.txt
> [2]
> http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_03_19.txt
>
> On May 17, 2008, at 11:11 AM, Dave wrote:
>
>> On Sat, May 17, 2008 at 2:03 PM, Craig L Russell <Cr...@sun.com>
>> wrote:
>>>
>>> A few months ago, the board asked for an analysis of all PMCs for
>>> encryption
>>> technology used in projects.
>>>
>>> I didn't see the analysis for Roller in the Feb board report and it's not
>>> in
>>> May's report (yet).
>>
>>
>> Hi Craig,
>>
>> Thanks for pointing that out.
>> Can you point to an example analysis, e.g. did OpenJPA do one?
>>
>> - Dave
>>
>>
>>
>>>> Here's what I have so far: http://cwiki.apache.org/confluence/x/1E4B
>
> Craig Russell
> Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
> 408 276-5638 mailto:Craig.Russell@sun.com
> P.S. A good JDO? O, Gasp!
>
>
--
http://raibledesigns.com
Re: DRAFT May 2008 Apache Roller board report
Posted by Craig L Russell <Cr...@Sun.COM>.
Hi Dave,
The board reports for Feb [1] and Mar [2] 2008 have lots of examples.
See the mail with subject "[ALL PMC CHAIRS] Export Notification
policy" for details of what's needed. Basically, if there is any code
in Roller that either implements encryption or uses encryption
features of a third party library, then Roller needs to declare itself
to use encryption technology.
If it can't be done by Monday, should put into the board report
something like "Export Notification policy review is underway" and
then underway it.
OpenJPA doesn't use encryption technology and reported this in April.
Craig
[1] http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_02_20.txt
[2] http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_03_19.txt
On May 17, 2008, at 11:11 AM, Dave wrote:
> On Sat, May 17, 2008 at 2:03 PM, Craig L Russell <Craig.Russell@sun.com
> > wrote:
>> A few months ago, the board asked for an analysis of all PMCs for
>> encryption
>> technology used in projects.
>>
>> I didn't see the analysis for Roller in the Feb board report and
>> it's not in
>> May's report (yet).
>
>
> Hi Craig,
>
> Thanks for pointing that out.
> Can you point to an example analysis, e.g. did OpenJPA do one?
>
> - Dave
>
>
>
>>> Here's what I have so far: http://cwiki.apache.org/confluence/x/1E4B
Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:Craig.Russell@sun.com
P.S. A good JDO? O, Gasp!
Re: DRAFT May 2008 Apache Roller board report
Posted by Dave <sn...@gmail.com>.
On Sat, May 17, 2008 at 2:03 PM, Craig L Russell <Cr...@sun.com> wrote:
> A few months ago, the board asked for an analysis of all PMCs for encryption
> technology used in projects.
>
> I didn't see the analysis for Roller in the Feb board report and it's not in
> May's report (yet).
Hi Craig,
Thanks for pointing that out.
Can you point to an example analysis, e.g. did OpenJPA do one?
- Dave
>> Here's what I have so far: http://cwiki.apache.org/confluence/x/1E4B
Re: DRAFT May 2008 Apache Roller board report
Posted by Craig L Russell <Cr...@Sun.COM>.
Hi Dave,
A few months ago, the board asked for an analysis of all PMCs for
encryption technology used in projects.
I didn't see the analysis for Roller in the Feb board report and it's
not in May's report (yet).
Craig
On May 17, 2008, at 9:34 AM, Dave wrote:
> Here's what I have so far: http://cwiki.apache.org/confluence/x/1E4B
>
> Feedback is welcome but I need to submit the report this weekend.
> Sorry for the late notice.
>
> - Dave
Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:Craig.Russell@sun.com
P.S. A good JDO? O, Gasp!