News for hackers. Stuff that matters.

A comment on The Realities of Being a FOSS Maintainer.

Re:The Realities of Being a FOSS Maintainer by strken on Saturday September 16, 2017 @08:01AM (#15264233)
As someone who was going to switch a few personal projects to Caddy this weekend, and who read through both the initial announcement and this, I am now massively confused by the whole thing and have no idea what users are actually allowed to do.

Is "sudo apt-get install caddy" allowed? Does header advertising mean "Server: caddy" or "X-Advertisement: go to www.malicious.com for camgirls"? Is this indicative of a broader move to stop supporting the open source version? If I had previously installed Caddy through a package manager that grabbed the official binaries, and I updated my system, would I now be breaching an EULA that I never saw? And so on.

Obviously I am not entitled to get anything for free and don't use the software anyway, and I can probably find answers after 10 minutes on the Caddy website, but this seems like a communications issue that might have made people angry - particularly if they thought they would have to immediately migrate back to nginx with zero notice.

[ Parent | on HN ]
Re:The Realities of Being a FOSS Maintainer by jlgaddis on Saturday September 16, 2017 @06:06PM (#15267014)
The caddy source code is licensed under the Apache License. As a user, you can modify and/or use the software in pretty much any way you see fit -- as long as you download the source and build it yourself. You can add or remove features (including the controversial header) and use it as you wish, but redistributing modified versions and calling them "caddy" may not be permitted.

Binary packages from your distro should also be fine.

If you download and use the binaries from the caddy web site, you are bound by their EULA.

To be safe, use the version provided by your distro or -- even better -- build it from source yourself.

You may want to read the actual Apache License [0] yourself, skim over the "Licensing conditions" section [1] of the Wikipedia page, or, at the least, review GitHub's bullet points [2].

[0]: https://www.apache.org/licenses/LICENSE-2.0

[1]: https://en.wikipedia.org/wiki/Apache_License#Licensing_condi...

[2]: https://github.com/mholt/caddy/blob/master/LICENSE.txt

[ Parent | on HN ]
Re:The Realities of Being a FOSS Maintainer by djhworld on Saturday September 16, 2017 @08:25AM (#15264333)
I don't believe there are any Caddy packages in the main repos. You have to download and install it yourself, or create your own .deb (correct me if I am wrong)

In terms of the header, that change was reverted a few days ago

[ Parent | on HN ]