Jos Vos wrote: > On Tue, Nov 09, 2004 at 07:23:44AM +1100, Damien Miller wrote: > > >>Nobody disputes Redhat's right to fork OpenSSH, but why does >>Redhat not make their desired changes through the standard RPM >>patching mechanism? By distributing their own OpenSSH tarballs >>instead of patching pristine sources, Redhat breaks the link of >>transparency, accountability and trust that their own RPM build >>model is supposed to provide. > > They do the same for "xmms", for example, to eliminate MP3 support > *and also not ship MP3 source code*, due to possible legal issues. Then they should also chop RC4 out of OpenSSL, OpenSSH and anything else that implements it because its legal status is near identical. -d
