Re: Did IBM Hijack Apache????

[Hans Boldt <boldt@xxxxxxxxxx>]

jt wrote:
> Same as Shannon.. I dunno, Steve, but would seriously DOUBT it.
>
> IBM has the common sense not to put security code in the public domain.
> Mebbe keep TOO much code outta view, but I am of the opinion that it's
> nonsense to put security internals in clear view text, (same as it was with
> passwords in the past...;-)...!
>
>
> | -----Original Message-----
> | [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Steve Richter
>
> | are all of the ibm changes open source?

You need a lawyer to provide a definitive answer, or even to 
interpret much of the Apache Software License 
(http://www.apache.org/LICENSE.txt). I'm not a lawyer, so take this 
for what it's worth. A cursory reading of the license suggests that 
it's NOT necessary that modified Apache distributions include the 
modified source code.

Note that it's been the experience of the open source community that 
nothing can locate and fix problems as effectively as thousands of 
outside reviewers. That's especially true in the area of security. 
It's long been known that "security by obscurity" does not work.

Cheers! Hans