[FFmpeg-devel] FFmpeg governance

[Kieran Kunhya]

On Thu, 2 Jan 2025, 06:49 compn, <ff at hawaiiantel.net> wrote:

> On Thu, 2 Jan 2025 02:23:08 +0000, Kieran Kunhya via ffmpeg-devel wrote:
>
> > On Wed, Jan 1, 2025 at 11:10 PM compn <ff at hawaiiantel.net> wrote:
> > >
> > > On Tue, 31 Dec 2024 17:28:31 +0000, Kieran Kunhya via ffmpeg-devel
> > > wrote:
> > >
> > > > I personally don't want any control (I am not in GA or CC), I want
> the
> > > > people to control FFmpeg.
> > >
> > > iirc someone wanted, to improve security, to have releases and
> snapshots
> > > to be signed off by multiple people.
> > >
> > > i suggested at vdd in the ffmpeg meeting that a backup ffmpeg server
> > > could be made at videolan. ffmpeg snapshots and releases could be
> > > signed and hosted at videolan, or where ever. does not have to be
> > > videolan. we could go back to sourceforge even.
> > >
> > > anyone can do this today if they wanted. it doesnt require a vote. just
> > > a simple patch to src/download and whoever volunteers to admin the
> > > backup server.
> > >
> > > -compn
> >
> > The whole point of having releases and snapshots signed off by
> > multiple people is that they are signed *at the same time* by multiple
> > people during the release process.
> > Your proposal does not appear to do this and of course continues the
> > status quo where one person controls everything.
>
> yes multiple people sign it on server 2 at the same time during the
> release process.
>

Then if multiple people can sign it on server 2, multiple people can sign
it on server 1.

Kieran

>