incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Roman Shaposhnik <>
Subject ASF hosted binaries collecting user data without an explicit opt-in
Date Tue, 06 Jun 2017 01:48:44 GMT

after seeing this thread on legal-discuss:

I'd like to ask a policy related question.

What we currently have is a whole bunch of binaries hosted
by ASF: that
collect user data and ship it away to a host currently not
associated with ASF (nor does it seem to be associated with
Ignite's PMC). The host name is (and, as a side note,
as it turns out the connection to that host in Ignite releases prior
to 1.9 is unsecure:

Is this something ASF should be concerned with from a standpoint
of the policy that we have for binary convenience artifacts that are
hosted on our end?

Would it make it different if and the data collected
by it was managed by an Ignite PMC as opposed to an unidentified
3d party?


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message