[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1036751: RFS: mini-httpd/1.30-4 [ITA] -- Small HTTP server



Hello Alexandru,

Thank you for this latest update.  Notes follow inline.  Please count
the TODO items, resolve 4/4, and file an MR.

Alexandru Mihail <alexandru.mihail2897@gmail.com> writes:

> Hello again, Nicholas !
>
> -----------------------------------------------------------------------
> debian/copyright:
>
> Files: htpasswd.c htpasswd.1
> Copyright: 1993-1994 Rob McCool <robm@stanford.edu>
> Copyright: 1997 Jef Poskanzer <jef@mail.acme.com>
> License: BSD-2-clause
> Comment: htpasswd* are mostly NCSA licensed. 
>  RobMcCool's copyright was established by examining original NCSA httpd

1. Please indent everything in the Comment: field by a single white space
at the beginning of the line.

> source code mirrored here:
> https://github.com/TooDumbForAName/ncsa-httpd/
> This git repository is a convenient copy of the NCSA HTTPd 1.5.2 source
> code which was verified to be accurate and complete by comparing with a
> WaybackMachine capture of the original NCSA ftp archive found here:
> https://web.archive.org/web/20130120184619/http://ftp.ncsa.uiuc.edu/Web/httpd/Unix/ncsa_httpd/current/httpd_1.5.2a-export_source.tar.Z

Does that link really work?  Are you sure it's not this one?

https://web.archive.org/web/20160619204223/ftp://ftp.ncsa.uiuc.edu/Web/httpd/Unix/ncsa_httpd/current/httpd_1.5.2a-export_source.tar.Z

I'm surprised the WayBack Machine dates that file June 19, 2016--very
curious.

> Portions of htpasswd* were edited by Jef Poskanzer, thus these files
> remain under BSD-2-clause.

The copyright info you've written in this version is immensely improved :)

2. Beyond this, you'll need to add a on every blank line that

 .

so that the paragraphs in the "Comment" field of the "Files: htpasswd.c
htpasswd.1" aren't split by an empty newline; they need to remain part
of the same field.  Nagivate to /usr/share/doc/*/copyright for many
examples.

> NCSA License:
> This code is in the public domain. Specifically, we give to the public
> domain all rights for future licensing of the source code, all resale
> rights, and all publishing rights.
  .
> We ask, but do not require, that the following message be included in
> all derived works:
  .
> Portions developed at the National Center for Supercomputing
> Applications at the University of Illinois at Urbana-Champaign.
  .
> THE UNIVERSITY OF ILLINOIS GIVES NO WARRANTY, EXPRESSED OR IMPLIED,
> FOR THE SOFTWARE AND/OR DOCUMENTATION PROVIDED, INCLUDING, WITHOUT
> LIMITATION, WARRANTY OF MERCHANTABILITY AND WARRANTY OF FITNESS FOR A
> PARTICULAR PURPOSE.

 /\ It will look something like that (note the new indented periods)

>  debian-legal thread:
> https://lists.debian.org/debian-legal/2023/07/msg00001.html
>
> -----------------------------------------------------------------------
> Nicholas, I've finally found an "original" copy 
> of the httpd 1.5.2 src !! (Mentioned in the text above, it's the very
> long WaybackMachine link).

You have exceptional research skills.

> After diff'ing the github copy and the
> original .tar.Z (also, haven't seen that format in years), they seem to
> match! Thus, I can confirm the github copy is accurate (previously, we
> had no authoritative way to trust the github repo).

Oh man, yeah, hello early days of the internet!  All you need now is
some MIDI files and GIFs.

3. Please note which version of NCSA httpd matches mini-httpd.

>>I'm still not certain that this wiki contributor's position is
>>legally
>>sound everywhere in the world.  For a counter example see:
>>
> https://opensource.stackexchange.com/questions/9871/why-is-there-no-public-domain-licensing-in-europe
>
> I've read the link and I share your concerns. I'm a bit lost
> here..maybe another question to legal is the right choice ?

While I'm not a lawyer, I believe that the approach we're going with is
more legally defensible around the world than the aspirational public
domain one.  BSD-2-clause is also better understood than NCSA as far as
I know. I'm relieved that work this didn't end up being a pulp novel
situation where someone stumbles onto a dirty rotten secret at the heart
of the origins of the internet while untangling the roots of a project
like this one.  

As an aside, the last release that Robert McCool worked on was v1.3, and
then he left in 1994 [1].

> Thanks for your time and may you have a great day,

You're welcome, you too!  Send me that merge request when you have time.


Cheers,
Nicholas

[1] https://web.archive.org/web/20090416132804/http://hoohoo.ncsa.uiuc.edu/docs/acknowledgement.html

Attachment: signature.asc
Description: PGP signature


Reply to: