From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id B29121382C5 for ; Sat, 27 Jun 2020 07:37:18 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E4A18E0964; Sat, 27 Jun 2020 07:37:17 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B3B92E0964 for ; Sat, 27 Jun 2020 07:37:17 +0000 (UTC) Received: from grubbs.orbis-terrarum.net (localhost [127.0.0.1]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 7354B34F0E6 for ; Sat, 27 Jun 2020 07:37:16 +0000 (UTC) Received: (qmail 17956 invoked by uid 10000); 27 Jun 2020 07:37:16 -0000 Date: Sat, 27 Jun 2020 07:37:16 +0000 From: "Robin H. Johnson" To: gentoo-nfp@lists.gentoo.org Subject: Re: [gentoo-nfp] Social contract and its effect on vendors and service delivery. Message-ID: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-nfp@lists.gentoo.org Reply-To: gentoo-nfp@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="5oH/S/bF6lOfqCQb" Content-Disposition: inline In-Reply-To: X-Archives-Salt: 727e5609-3d8a-4000-a34d-fab83c267193 X-Archives-Hash: 28d88a4ecbc3769ff0c119cdb01ba27e --5oH/S/bF6lOfqCQb Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 26, 2020 at 04:32:24PM -0400, Rich Freeman wrote: > On Fri, Jun 26, 2020 at 4:17 PM Alec Warner wrote: > > > > Is it against the social contract to purchase these CDN services? > > Is it against the social contract to purchase these CDN services, even = if the services are provided via open source software? > > >=20 > IMO the obvious answer to the second question is that purchasing > services that are provided using FOSS is absolutely permitted by the > social contract. Obviously we should be careful with money, but we're > allowed to spend money on services and in fact have done so in other > cases (like paying for a bug bounty, for accounting services, etc - > generally all using FOSS where it exists). How much of the CDN provider's stack must be FOSS? - Just the CDN software? - The billing stack? - everything in the company? > I realize that you didn't want to get into the fiscal argument, but > I'd toss in my two cents here: it seems like we have a lot of orgs > that donate servers/etc and I know we're always getting requests on > pr@ for "sponsors" (usually cash for SEO, but maybe some could offer > actual hosting). I actually like depending on donations in kind a lot > more than money because it tends to keep the org rooted in what serves > the broader FOSS/etc community vs being an org that handles a lot of > cash which can sometimes lose perspective. Speaking as treasurer, In-kind donations require different handling than Cash Donations; they're actually somewhere I feel we have some exposure in case of future audit, because past in-kind sponsors generally did not provide us with a good statement of the value of those in-kind services, that might be needed for tax purposes. However, I'd like to ask: What about donations of CDN services specifically? CDN77 is one of the present sponsors (see my other mail in this thread). I've been trying to reach out to Fastly (unsucessfully) to get a sponsorship from them: their stack is based on Varnish, and offers functionality that CDN77 doesn't: lots more endpoints, IPv6, API for uploading certs >=20 > --=20 > Rich >=20 --=20 Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robbat2@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 --5oH/S/bF6lOfqCQb Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Robbat2 @ Orbis-Terrarum Networks - The text below is a digital signature. If it doesn't make any sense to you, ignore it. iQKTBAABCgB9FiEEveu2pS8Vb98xaNkRGTlfI8WIJsQFAl729ytfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEJE RUJCNkE1MkYxNTZGREYzMTY4RDkxMTE5Mzk1RjIzQzU4ODI2QzQACgkQGTlfI8WI JsQUNg//XvhanxC94hpRWsj7D/JURWRUOquwqE2EhpLBt7DnS+JyE/87z21jePB3 8Ec3ti1ZxIZ7JqMdosfEmVK1dxQOvZP7It65r6TzZLx1XrzZCqfgbbbI+ZtyHrRf gUaH2HvSBuzATlq2KPGEXMlM4PWS/MAWxT/HO9FhEHKVN7M4owNtRkEthTtBhqOd 8bbQRRzcZVT7+8oXiH2XmaCxnIP8G9CLDbgwWygDhqymST0+zj7o+EJ29piAF0E/ dGqNIjWXif237gKjCKESlM8l4cg0TVtK38YF5h2B3ca9xhe2vSkth6UVvxEt8j/X fPzYueOZdCXate9D1LMvw178bTb1cG0vPMN5z84/dGJnmU7GuK7vmbhODBzC9Vz2 1wmdqiKpv4ncAQk4mBgjTmgzsLIM+yYQ869Md2qX4nBKbLhQ/WAxBCpDmmCgLJwH 3cXILimeAbMAhq3Vm70TOpjeNjcDUau2EmTlW/FrUpCFpl30taHan6JAxG4e//z3 AfEhXA13JFmYB0kbhC71b0pE3ML/DSG4Xn8yPHS4g69sn1iTDGkGQ5yQh/w4Sz/z bjxMVOFaWb7pOGycQIlT46smWQ8+yQW6DmJxbWvPR80+Jegau7dCkt/4dn7GkW2H pN0YhF3vonBVABjdshLgCaKhRSnigYU/gxrBA0mmzVMDyLqVZ34= =6wGL -----END PGP SIGNATURE----- --5oH/S/bF6lOfqCQb--