Re: Draft: policy for vendors listed on Debian website
On Wednesday 30 November 2011 20:32:20 Luca Capello wrote:
> Hi there!
Hi,
> Please do not Cc: me, I read the debian-www@ list.
>
> Adding the debian-cd@ mailing list because I ask some questions related
> to the CD images. For their information, the discussion started at:
>
> <http://lists.debian.org/20111013002342.GC742@javifsp.no-ip.org>
>
> On Sun, 20 Nov 2011 02:37:48 +0100, Javier Fernandez-Sanguino wrote:
> > On 17 October 2011 20:40, Luca Capello <luca@pca.it> wrote:
> >> On Mon, 17 Oct 2011 20:12:34 +0200, Luca Capello wrote:
> >>> On Thu, 13 Oct 2011 20:25:16 +0200, David Prévot wrote:
> >>>> Le 13/10/2011 04:16, Luca Capello a écrit :
> >>>>> On Thu, 13 Oct 2011 02:23:42 +0200, Javier Fernández-Sanguino Peña
wrote:
> >>>>>> - Vendor has to sell the "Official CD Debian images".
> >>>>>>
> >>>>>> Note: Even though vendors can send "additional CDs with
> >>>>>> unofficial software" I believe we should not list vendors which
> >>>>>> provide only "modified" CD Debian images.
> >>>>>
> >>>>> What is the rationale for that? "modified" could also means that
> >>>>> they change the default theme to their logo, for example, which I
> >>>>> found fair.
> >>>>
> >>>> If the CD is modified, how would it be possible to check if it is
> >>>> indeed an official CD? It would brake the trust path…
> >>>>
> >>>> 0: http://www.debian.org/CD/verify
> >>>
> >>> Point taken, but I still think that there are different levels of
> >>> modification.
>
> Actually, after having read again David's reply and the link he posted
> (which I re-added), I think the verify page should be corrected to warn
> that we are talking about CD *images*, not the content of them:
Actually, we can talk of both; JFYI: http://www.debian.org/CD/faq/#verify
now contains instructions how to *authenticate* and *verify*:
a) Debian ISO images.
b) Already burnt optical discs (claiming to contain Debian), you have been
given by others, or resp. you've burnt yourself.
--
pub 4096R/0E4BD0AB <people.fccf.net/danchev/key pgp.mit.edu>
Reply to: