On 30/09/2015 19:36, Salz, Rich wrote: >> Did you miss the detail about the contribution agreement not granting any rights to third parties until the OpenSSL Foundation has "published" the contribution. > No I didn't. They are free to post code as apache 2 and frequently rebase against master. Or whatever they want. We don't have the resources, or interests, to be a general code repository for "related to openssl" things (any more). > >> In other words, if the only license provided in the Pull request is "this is a contribution", then there is no license for making that downstream repo. > Then they will have to be careful and precise about how the licensed it. Same as if openssl were doing it. > >> Also, isn't GitHub located in the country crypto folk always try to avoid for legal reasons? > Which one, there are so many of them these days :( It's a good point; perhaps you can host a repo? Denmark is relatively right-thinking on this issue. Unfortunately, that would be problematic due to potentially conflicting legal obligations. Enjoy Jakob -- Jakob Bohm, CIO, Partner, WiseMo A/S. http://www.wisemo.com Transformervej 29, 2860 S?borg, Denmark. Direct +45 31 13 16 10 This public discussion message is non-binding and may contain errors. WiseMo - Remote Service Management for PCs, Phones and Embedded -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150930/b83270ed/attachment-0001.html>