HTTP Digest auth module for JtR, copyright issues

David Paleino d.paleino at
Sun Jan 18 17:35:24 UTC 2009

I'm writing to you because you wrote the module in subject. Trying to include
the patch for this module into the Debian package for john, I encountered some

 1) no copyright years are given.
    Since a patch cannot convey timestamps information, I cannot infer those
    from anywhere. Please provide one or more years, or a range;

 2) no licensing statement is made.
    Please choose a DFSG-free license to ease inclusion into Debian. Also, you
    might want to ask for inclusion upstream, and that has additional
    Also Public Domain is fine, but please clearly state it.

  3) I suppose you're the copyright holder for doc/HDAA_README as well, but I
  cannot include it until I'm sure. So please clearly state this as well.

Please remember to keep the list CCed, so that we can have a public record of
our mailing.

David Paleino

 . ''`.  Debian maintainer |
 : :'  : Linuxer #334216 --|--
 `. `'`  GPG: 1392B174 ----|----
   `-   2BAB C625 4E66 E7B8 450A C3E1 E6AA 9017 1392 B174
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : 

More information about the Pkg-john-devel mailing list