From nobody Fri Apr 19 21:44:54 2024 X-Original-To: questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4VLp8T0kVMz5HpMJ for ; Fri, 19 Apr 2024 21:44:57 +0000 (UTC) (envelope-from dalescott@shaw.ca) Received: from omta001.cacentral1.a.cloudfilter.net (omta001.cacentral1.a.cloudfilter.net [3.97.99.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4VLp8S4NVTz477l; Fri, 19 Apr 2024 21:44:56 +0000 (UTC) (envelope-from dalescott@shaw.ca) Authentication-Results: mx1.freebsd.org; none Received: from shw-obgw-4003a.ext.cloudfilter.net ([10.228.9.183]) by cmsmtp with ESMTPS id xnqkrnxV72Ui5xw2RrS2Vk; Fri, 19 Apr 2024 21:44:55 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=shaw.ca; s=s20231031; t=1713563095; bh=vPsGdw33u+VgK4GYLjNSmJ8r042Jz3Yj+ZJ/D5o9RZY=; h=Date:From:To:Cc:In-Reply-To:References:Subject; b=LFwXadw9Futhlx/5zF8mMtPPZxk85l61aYTLt/kpIeFyJEj7A0I0gdfxPwrLa4d0D 8N1LBrkfVELSTKtOwRDQTSpftPOCGW5NlO3v3sFEdajAgSIOT3kuqiAQjneZYDQB0v 75goYExoMAkc8LcgTcEKxYiyWSzLHXbA551wWorGwp+WlYkwt0yXow245keDrm8Wzj dK3HMcf53B1GfWNo/o5dVCbnK6nrI0CZBjVyymfxBXr7wdLDt7awclE7V8bDf/v116 G196qnATk21x4Bn2ldozZL5xnnnVKWMMwLzSsynMDQAeVP89yfoMdHyXjwu//79Z3e OGIBdarzprs0A== Received: from cds220.dcs.int.inet ([64.59.134.6]) by cmsmtp with ESMTP id xw2Rr9OgUByQrxw2RrjqBr; Fri, 19 Apr 2024 21:44:55 +0000 X-Authority-Analysis: v=2.4 cv=UOF+Hzfy c=1 sm=1 tr=0 ts=6622e5d7 a=9zdlX7M534QhL7mOrorEvQ==:117 a=jw7zIB8jT-pSfsSW:21 a=FKkrIqjQGGEA:10 a=on0NmgUIp3IA:10 a=IkcTkHD0fZMA:10 a=6I5d2MoRAAAA:8 a=Rk-M77FJAAAA:8 a=IP17e_1XAAAA:8 a=zQtYmFeZ0pf4JFPXDDgA:9 a=QEXdDO2ut3YA:10 a=GAhIxBDjLKe0SSfLgqP8:22 a=IjZwj45LgO3ly-622nXo:22 a=ef1k35tKgZpiIrJ2aQ5N:22 a=pIDkZDmBs-rV6VORH8mB:22 Date: Fri, 19 Apr 2024 15:44:54 -0600 (MDT) From: Dale Scott To: John Baldwin Cc: Lexi Winter , questions , core@freebsd.org Message-ID: <868244543.174654890.1713563094902.JavaMail.zimbra@shaw.ca> In-Reply-To: <0b3d0e98-318f-4807-b4d1-6597af6afd6d@FreeBSD.org> References: <0b3d0e98-318f-4807-b4d1-6597af6afd6d@FreeBSD.org> Subject: Re: why does FreeBSD only offer trustworthiness and transparency to people who donate money? List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [162.223.103.50, 207.194.199.126, 104.119.188.223, 104.119.188.223] X-Mailer: Zimbra 8.8.15_GA_4581 (ZimbraWebClient - GC124 (Win)/8.8.15_GA_4581) Thread-Topic: why does FreeBSD only offer trustworthiness and transparency to people who donate money? Thread-Index: d/gk+ziYltia3jWP6EMbBLSpI3Q6Lw== X-CMAE-Envelope: MS4xfBC+GHs8gmgf6Cf5yWL+MAl8U4SL/YADvOVbwtoxYeHftN3A7ivuMz6hqH67XsxXE6r+Gr2IuMT6rBNtkzn/WdyW5+R3BwyelzZvwdEtMs3BvuJFF+f6 nx9eYxeWfUgphm+CJbfDahOsvsZHVGW86rl7l7ejp8Uw/pzmN0YV3BFLPYxbwZXz33FY1F+YMLaxuCG6CIO5wj0bAXuqajHtbypskv+E9OleGKhfTZ8SQwn/ Ooe2gD7m3skviCBo6E1M5kLPpZbuQTTe5p6uNNbBgh4= X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US] X-Rspamd-Queue-Id: 4VLp8S4NVTz477l ----- Original Message ----- > From: "John Baldwin" > To: "Lexi Winter" , "questions" > Cc: core@freebsd.org > Sent: Friday, April 19, 2024 2:55:46 PM > Subject: Re: why does FreeBSD only offer trustworthiness and transparency to people who donate money? > On 4/18/24 2:30 PM, Lexi Winter wrote: >> so today i came across this press release: >> >> https://freebsdfoundation.org/blog/freebsd-foundation-delivers-v1-of-freebsd-ssdf-attestation-to-support-cybersecurity-compliance/ > Thank you John for a very clear explanation. Can you comment if cybersecurity-type attestations may also be available one day? Personally I suspect there are too many variables for a general attestation, but also suspect your opinion will be infinitely more informed than mine. ;-) Cheers, Dale