From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id b4JnDvVUimf3SxIAWB0awg (envelope-from ) for ; Fri, 17 Jan 2025 08:02:45 -0500 Authentication-Results: simark.ca; dkim=pass (1024-bit key; secure) header.d=sourceware.org header.i=@sourceware.org header.a=rsa-sha256 header.s=default header.b=OnfHM8qi; dkim-atps=neutral Received: by simark.ca (Postfix, from userid 112) id 2958E1E100; Fri, 17 Jan 2025 08:02:45 -0500 (EST) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-5.4 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham autolearn_force=no version=4.0.0 Received: from server2.sourceware.org (server2.sourceware.org [8.43.85.97]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id 64B201E08E for ; Fri, 17 Jan 2025 08:02:44 -0500 (EST) Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id C42A1384780F for ; Fri, 17 Jan 2025 13:02:43 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org C42A1384780F DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1737118963; bh=lX9nswk4DvDaq0yXp2Mw97SZioBMfVCWtirF3aWKn38=; h=Date:To:Cc:In-Reply-To:Subject:References:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From:Reply-To:From; b=OnfHM8qimcrdBsyjinCaE52nE/CORf9Ii9b0laiwTa8/p3G4G6R1cIRGmq0bMQYRN fR6TLPoqZDJAwCt7YYBqsnCyWi94YIZJdwC8TmqUwPXqFtPKuLWoat+de/AHqqdx7u RooU+gc8XLk97xQkhOEkmP+l7x3lhdZlyUJWVSO0= Received: from eggs.gnu.org (eggs.gnu.org [IPv6:2001:470:142:3::10]) by sourceware.org (Postfix) with ESMTPS id D2CDA3848439 for ; Fri, 17 Jan 2025 13:01:52 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org D2CDA3848439 ARC-Filter: OpenARC Filter v1.0.0 sourceware.org D2CDA3848439 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1737118912; cv=none; b=a9mrD1smy4ddLJJ2jgZqXOldsAYxUcoMofZjdanqtGxtYuug0pU1QVGceuXCbZs13M56At3YzR0NfcmNGwwNnHw1TuKc3HHAiloaWYcAv5LSc40UL/hIHeZrtANKn+4B63BPJs7iIwRGwhH5J3hZjoca7q0ZwQH9Sf+3NyIEqRA= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1737118912; c=relaxed/simple; bh=FFq0ltadWCXjIDSW9QiyPR+Uf1TKpl2GPpw17KRrX80=; h=DKIM-Signature:Date:Message-Id:From:To:Subject; b=eipuM57Mn69r8y1c9VOfzAI4j+N/IdN/H4KVR3yZL6CNphHiJJCSR5OHX5KYKKIc9q1U2/GKkZ7421g8kIYLJ5vMBah2sqNwHbA9kAFB9EEeGIVaSqWK2n7Jy1ZmLvCsHH/04okXjNNQqugfARMh9l+e+4pW67fZvj7jkPy2Wnc= ARC-Authentication-Results: i=1; server2.sourceware.org DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org D2CDA3848439 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tYlyx-0003Df-4l; Fri, 17 Jan 2025 08:01:51 -0500 Date: Fri, 17 Jan 2025 15:01:45 +0200 Message-Id: <86y0z9egqu.fsf@gnu.org> To: Florian Weimer Cc: gdb@sourceware.org, aburgess@redhat.com, luis.machado@arm.com, tom@tromey.com, blarsen@redhat.com, pinskia@gmail.com In-Reply-To: <87o705wwsd.fsf@oldenburg3.str.redhat.com> (message from Florian Weimer on Fri, 17 Jan 2025 11:37:54 +0100) Subject: Re: DCO: Was: Re: Contributing to gdb References: <86538dac-6c3a-4b9e-9de9-3906e645fa4d@redhat.com> <87y16vwbzl.fsf@tromey.com> <74c8b867-f5bb-48f7-9849-11d06e63a3d7@arm.com> <87tta2r5z2.fsf@redhat.com> <86bjwavcux.fsf@gnu.org> <87o705wwsd.fsf@oldenburg3.str.redhat.com> X-BeenThere: gdb@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Eli Zaretskii via Gdb Reply-To: Eli Zaretskii Errors-To: gdb-bounces~public-inbox=simark.ca@sourceware.org Sender: "Gdb" > From: Florian Weimer > Cc: Andrew Burgess , Eli Zaretskii , > luis.machado@arm.com, tom@tromey.com, blarsen@redhat.com, > pinskia@gmail.com > Date: Fri, 17 Jan 2025 11:37:54 +0100 > > * Eli Zaretskii via Gdb: > > > I mostly fear that by accepting DCOs we will open ourselves to > > contributions from people who are not authorized to contribute their > > code (e.g., it was copied from somewhere, or their employment contract > > makes all their code the property of their employer, or something of > > that nature). DCO makes it much easier to submit code based on > > incorrect understanding of what the DCO text says, so the probability > > for honest mistakes is higher than with CA. > > It is possible that someone signs a copyright assignment without being > authorized to do so, which is exactly the same problem. As far as I > know, the FSF doesn't verify that the signer has been authorized by the > organization that owns the rights. verification is not the issue here, the issue is whether the contributor is at all aware of this aspect. The copyright assignment process includes the contributor filling a form, where he/she is asked whether they have an employer that should be included in the process: [Do you have an employer who might have a basis to claim to own your changes? Do you attend a school which might make such a claim?] I think reasonable people will always know to answer those questions, or at least ask the FSF copyright clerk what is the meaning of "an employer who might have a basis to claim to own your changes" (and similarly the meaning of the question about the school). By contrast, AFAIK there's no such process in sending the DCO.