On Wed, Dec 19, 2018 at 11:40:07AM -0500, Antoine Beaupré wrote:
[...]
> Both Emilio and Daniel supported the idea of pushing the GnuPG 2.1
> backport. So I did that and spent most of my LTS time for december
> working on the GnuPG 2.1 upload.
>
> I was just about to finalize the upload, based on Emilio's review of the
> patchset, when I read your message. Now I'm at a loss at what to do with
> this project.
>
> Obviously, it would be easy to upload a new debian-security-support
> package to declare Enigmail dead. But it would have been a much more
> efficient use of our time if we would have decided that back in
> september when I first brought up the idea.
>
> I find this situation rather frustrating, to say the least. I understand
> people don't always have time to read all messages and respond promptly
> to proposals, but I think I've given that one plenty of time, so it's a
> little difficult to just drop everything now, after so much work has
> been done to finalize that backport.
I very much understand your frustration and I don't think you should
have done this work in vain/uncompensated, however sometimes it's only
possible after the work to determine that an upgrade is too risky.
I've now also re-read this thread (for the 2nd time today..) and first
I'd like to notice that all the concerns were only brought up in the
last week, so it was definitly right from you to work on this for those
months. Second, it now reads to me as if Emilio changed his mind after
expressing concerns on Dec 14th, he indeed replied much more favorably
on the 18th.
I mostly worried that you didnt test all dependent packages and that we
essentially might break those when trying to support a package no
customer has expressed need for. But then I also suppose such breakage
could be fixed...
and now we are back to square one :/
--
cheers,
Holger
-------------------------------------------------------------------------------
holger@(debian|reproducible-builds|layer-acht).org
PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
Attachment:
signature.asc
Description: PGP signature