1 |
On Wed, Jul 28, 2021 at 10:47 AM Ulrich Mueller <ulm@g.o> wrote: |
2 |
> |
3 |
> We have taken the blueprint for the certificate-of-origin model from |
4 |
> Linux, and it does have a real name requirement. I'd rather not change |
5 |
> any element of it without getting legal advice first. |
6 |
> |
7 |
|
8 |
While I completely get the sentiment, and tend to be a proponent of |
9 |
real-name at least from Gentoo contributors, we have to keep in mind |
10 |
that we're not Linux. |
11 |
|
12 |
The Linux Foundation can afford to push people away, because half of |
13 |
their contributions are probably corporate at this point, and most |
14 |
contributors have a lot of motivation to get their patches included. |
15 |
Their customers (who also are their board members and financial |
16 |
backers) probably also value a more conservative approach. |
17 |
|
18 |
I'm sure a lawyer will tell you that you're taking less risk if you |
19 |
require legal names. I'll go ahead and add my own advice that |
20 |
everybody reading this will also be taking less risk if they never get |
21 |
in a car or better still don't get out of bed. Getting legal advice |
22 |
isn't a bad idea, but ultimately the organization has to decide |
23 |
whether the risks/benefits are worth it. A lawyer might be able to |
24 |
help the organization better understand these tradeoffs, but if you're |
25 |
going to wait for somebody else to call the lawyer for you it isn't |
26 |
likely to happen. I suspect that most anonymous contributors don't |
27 |
care THAT much - they're just going to stop contributing. |
28 |
|
29 |
I think the key is to find the balance. You can make an argument |
30 |
either way, and I'm not sure how essential these anonymous |
31 |
contributions are. If we're better off without them then just be |
32 |
aware that is the choice we're making... |
33 |
|
34 |
-- |
35 |
Rich |