From contact at paulk.fr  Fri Apr 28 14:28:36 2017
From: contact at paulk.fr (Paul Kocialkowski)
Date: Fri, 28 Apr 2017 16:28:36 +0200
Subject: [Replicant] [PATCH 1/5] header: Link to current folder for home
	page links
In-Reply-To: <20170315230142.5705-2-wolfgit@wiedmeyer.de>
References: <20170315230142.5705-1-wolfgit@wiedmeyer.de>
 <20170315230142.5705-2-wolfgit@wiedmeyer.de>
Message-ID: <1493389716.5753.9.camel@paulk.fr>

Le jeudi 16 mars 2017 ? 00:01 +0100, Wolfgang Wiedmeyer a ?crit?:
> This allows to host the website in a subfolder.

Acked-by: Paul Kocialkowski <contact at paulk.fr>

> Signed-off-by: Wolfgang Wiedmeyer <wolfgit at wiedmeyer.de>
> ---
> ?include/header.php | 4 ++--
> ?1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/include/header.php b/include/header.php
> index b6eea32..eb6181c 100644
> --- a/include/header.php
> +++ b/include/header.php
> @@ -28,7 +28,7 @@
> ?				<span class="icon-bar"></span>
> ?				<span class="icon-bar"></span>
> ?			</button>
> -			<a class="navbar-brand" href="/"><img
> src="images/replicant_navigation.png" alt="Replicant" /></a>
> +			<a class="navbar-brand" href="./"><img
> src="images/replicant_navigation.png" alt="Replicant" /></a>
> ?		</div>
> ?		<div class="navbar-collapse collapse">
> ?			<ul class="nav navbar-nav">
> @@ -45,7 +45,7 @@
> ?	<div class="container">
> ?		<div class="row">
> ?			<div class="col-md-9">
> -				<div class="text-left"><a href="/"><img
> src="images/replicant.png" alt="Replicant" class="img-responsive" /></a></div>
> +				<div class="text-left"><a href="./"><img
> src="images/replicant.png" alt="Replicant" class="img-responsive" /></a></div>
> ?				<p>Replicant is a fully free Android
> distribution running on several devices,<br /><small>a free software mobile
> operating system putting the emphasis on freedom and
> privacy/security</small></p>
> ?
> ?				<div class="btn-group" style="margin-top:
> 20px;">
-- 
Paul Kocialkowski, developer of free digital technology and hardware support

Website: https://www.paulk.fr/
Coding blog: https://code.paulk.fr/
Git repositories: https://git.paulk.fr/ https://git.code.paulk.fr/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20170428/ef6db6ce/attachment.asc>

From contact at paulk.fr  Fri Apr 28 14:30:15 2017
From: contact at paulk.fr (Paul Kocialkowski)
Date: Fri, 28 Apr 2017 16:30:15 +0200
Subject: [Replicant] [PATCH] about: Add FAQ entry about the CAcert
	certificate
In-Reply-To: <20170311000918.4206-1-wolfgit@wiedmeyer.de>
References: <20170311000918.4206-1-wolfgit@wiedmeyer.de>
Message-ID: <1493389815.5753.10.camel@paulk.fr>

Le samedi 11 mars 2017 ? 01:09 +0100, Wolfgang Wiedmeyer a ?crit?:
> Signed-off-by: Wolfgang Wiedmeyer <wolfgit at wiedmeyer.de>

Can we drop this now that we're moving away from CaCert certificates?

> ---
> ?about.php | 5 +++++
> ?1 file changed, 5 insertions(+)
> 
> diff --git a/about.php b/about.php
> index 0cebc13..94d0f86 100644
> --- a/about.php
> +++ b/about.php
> @@ -52,6 +52,10 @@
> ?				<div class="panel-heading"><h3 class="panel-
> title">Why doesn't Replicant guide users through installing complementary
> proprietary components?</h3></div>
> ?				<div class="panel-body"><p>Replicant is a
> free software project and thus does not encourage nor enforce the use of
> proprietary software. Providing instructions to install such components is a
> way of encouraging the use of proprietary software, which is not an ethical
> thing to do.</p></div>
> ?			</div>
> +			<div class="panel panel-default" id="cacert-
> certificate-error">
> +				<div class="panel-heading"><h3 class="panel-
> title">Why do I get a warning message when connecting to the Replicant website
> with https?</h3></div>
> +				<div class="panel-body"><p>Replicant's
> website uses a certificate issued by the community-driven certificate
> authority <a href="//www.cacert.org/">CAcert</a>;. You get the warning because
> CAcert's root certificate is not trusted by your browser. It should however be
> possible to add the CAcert root certificate to the certificates your browser
> or your operating system trusts. Replicant will use certificates issued by <a
> href="https://letsencrypt.org/">Let's Encrypt</a> as soon as possible which
> will solve this issue. Replicant's website is currently hosted by <a
> href="https://osuosl.org/">OSU Open Source Lab</a> and their infrastructure
> does not yet support Let's Encrypt.</p></div>
> +			</div>
> ?		</div>
> ?		<div class="col-md-3">
> ?			<div class="list-group">
> @@ -65,6 +69,7 @@
> ?				<a href="#replicant-based-omnirom"
> class="list-group-item">Why is Replicant based on CyanogenMod instead of
> OmniROM?</a>
> ?				<a href="#shipping-proprietary-components"
> class="list-group-item">Why doesn't Replicant ship with proprietary components
> when free replacements are missing?</a>
> ?				<a href="#installing-proprietary-components"
> class="list-group-item">Why doesn't Replicant guide users through installing
> complementary proprietary components?</a>
> +				<a href="#cacert-certificate-error"
> class="list-group-item">Why do I get a warning message when connecting to the
> Replicant website with https?</a>
> ?			</div>
> ?		</div>
> ?	</div>
-- 
Paul Kocialkowski, developer of free digital technology and hardware support

Website: https://www.paulk.fr/
Coding blog: https://code.paulk.fr/
Git repositories: https://git.paulk.fr/ https://git.code.paulk.fr/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20170428/41380602/attachment.asc>

From contact at paulk.fr  Fri Apr 28 14:35:07 2017
From: contact at paulk.fr (Paul Kocialkowski)
Date: Fri, 28 Apr 2017 16:35:07 +0200
Subject: [Replicant] [PATCH v2] freedom-privacy-security-issues: Update
 general advice section
In-Reply-To: <20170315185137.21168-1-wolfgit@wiedmeyer.de>
References: <20170315170606.14543-1-wolfgit@wiedmeyer.de>
 <20170315185137.21168-1-wolfgit@wiedmeyer.de>
Message-ID: <1493390107.5753.11.camel@paulk.fr>

Le mercredi 15 mars 2017 ? 19:51 +0100, Wolfgang Wiedmeyer a ?crit?:
> Clarify that the storage should be encrypted using a strong passphrase.
> Chatsecure doesn't seem to be maintained anymore and it's not part of
> F-Droid anymore, so recommend Conversations instead.
> AGP was replaced with OpenKeychain in K-9 Mail. The link to the K-9
> Mail website is updated.
> Add Silence for encrypting SMS.
> Remove the Tor project's Android hardening guide: The guide was
> updated and there is a link to the updated guide at the beginning of
> the old guide. The new guide has extensive sections about CopperheadOS
> and recommends to use it and donate to the project. CopperheadOS is
> nonfree software. They not only use blobs like LineageOS does, but
> their entire source code changes have a nonfree licence[1].
> 
> [1]??https://copperhead.co/android/downloads
> 
> Signed-off-by: Wolfgang Wiedmeyer <wolfgit at wiedmeyer.de>

Acked-by: Paul Kocialkowski <contact at paulk.fr>

> ---
> 
> Changes since v1:
> 
> 	- Don't add orWall as it is EOL
> 
> ?freedom-privacy-security-issues.php | 7 ++++---
> ?1 file changed, 4 insertions(+), 3 deletions(-)
> 
> diff --git a/freedom-privacy-security-issues.php b/freedom-privacy-security-
> issues.php
> index db6d321..ceb15a5 100644
> --- a/freedom-privacy-security-issues.php
> +++ b/freedom-privacy-security-issues.php
> @@ -154,13 +154,14 @@
> ?				Some general good advice to ensure the best
> possible respect of freedom and privacy/security on mobile devices includes:
> ?				<ul>
> ?					<li>Installing only free software
> applications, from trusted sources such as F-Droid on Replicant.</li>
> -					<li>Encrypting the device's storage,
> to prevent some unauthorized access to the device's data.</li>
> -					<li>Using software that provides
> secure peer-to-peer-encrypted communications such as <a
> href="//dev.guardianproject.info/projects/gibberbot">ChatSecure</a> for
> instant messaging and <a href="//thialfihar.org/projects/apg/">AGP</a> with <a
> href="//code.google.com/p/k9mail">K-9 Mail</a> for emails on Replicant.</li>
> +					<li>Encrypting the device's storage
> with a strong passphrase, to prevent some unauthorized access to the device's
> data.</li>
> +					<li>Using software that provides
> secure encrypted communications such as <a href="https://conversations.im/">Co
> nversations</a>; for instant messaging and <a
> href="https://www.openkeychain.org/">OpenKeychain</a> with <a
> href="https://k9mail.github.io/">K-9 Mail</a> for emails on Replicant.</li>
> ?					<li>Using <a href="//www.torproject.o
> rg/">Tor</a>; to achieve reliable anonymity, for instance with <a
> href="//www.torproject.org/docs/android.html.en">Orbot</a> on Replicant.</li>
> +					<li>Using <a href="https://silence.im
> /">Silence</a>; to encrypt SMS messages.</li>
> ?					<li>If the device is telephony-
> enabled, switching the modem to airplane mode or (when possible) turning it
> off when not in use, to avoid being tracked at all times.</li>
> ?					<li>Browsers using the webview
> framework (such as the browser shipped with Replicant and <a href="https://git
> hub.com/anthonycr/Lightning-Browser">Lightning</a>;) are subject to <a
> href="//redmine.replicant.us/issues/1780">various security flaws</a> in
> Replicant 6.0.</li>
> ?				</ul>
> -				In addition, the <a href="//www.fsf.org/">Fre
> e Software Foundation</a> provides a <a
> href="//www.fsf.org/campaigns/surveillance">comprehensive guide to help
> protect freedom and privacy</a> and the Tor project an article entitled <a
> href="//blog.torproject.org/blog/mission-impossible-hardening-android-
> security-and-privacy">Mission Impossible: Hardening Android for Security and
> Privacy</a>.
> +				In addition, the <a href="//www.fsf.org/">Fre
> e Software Foundation</a> provides a <a
> href="//www.fsf.org/campaigns/surveillance">comprehensive guide to help
> protect freedom and privacy</a>.
> ?			</p>
> ?		</div>
> ?	</div>
-- 
Paul Kocialkowski, developer of free digital technology and hardware support

Website: https://www.paulk.fr/
Coding blog: https://code.paulk.fr/
Git repositories: https://git.paulk.fr/ https://git.code.paulk.fr/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20170428/e55a02a3/attachment.asc>

From wreg at wiedmeyer.de  Fri Apr 28 17:16:09 2017
From: wreg at wiedmeyer.de (Wolfgang Wiedmeyer)
Date: Fri, 28 Apr 2017 19:16:09 +0200
Subject: [Replicant] [PATCH] about: Add FAQ entry about the CAcert
	certificate
In-Reply-To: <1493389815.5753.10.camel@paulk.fr>
References: <20170311000918.4206-1-wolfgit@wiedmeyer.de>
 <1493389815.5753.10.camel@paulk.fr>
Message-ID: <87o9vga1wm.fsf@machinist.wiedmeyer.de>


Paul Kocialkowski writes:

> Le samedi 11 mars 2017 ? 01:09 +0100, Wolfgang Wiedmeyer a ?crit:
>> Signed-off-by: Wolfgang Wiedmeyer <wolfgit at wiedmeyer.de>
>
> Can we drop this now that we're moving away from CaCert certificates?

Yes, I created the patch before efforts were started to get a new cert.

>> ---
>> about.php | 5 +++++
>> 1 file changed, 5 insertions(+)
>> 
>> diff --git a/about.php b/about.php
>> index 0cebc13..94d0f86 100644
>> --- a/about.php
>> +++ b/about.php
>> @@ -52,6 +52,10 @@
>> 				<div class="panel-heading"><h3 class="panel-
>> title">Why doesn't Replicant guide users through installing complementary
>> proprietary components?</h3></div>
>> 				<div class="panel-body"><p>Replicant is a
>> free software project and thus does not encourage nor enforce the use of
>> proprietary software. Providing instructions to install such components is a
>> way of encouraging the use of proprietary software, which is not an ethical
>> thing to do.</p></div>
>> 			</div>
>> +			<div class="panel panel-default" id="cacert-
>> certificate-error">
>> +				<div class="panel-heading"><h3 class="panel-
>> title">Why do I get a warning message when connecting to the Replicant website
>> with https?</h3></div>
>> +				<div class="panel-body"><p>Replicant's
>> website uses a certificate issued by the community-driven certificate
>> authority <a href="//www.cacert.org/">CAcert</a>;. You get the warning because
>> CAcert's root certificate is not trusted by your browser. It should however be
>> possible to add the CAcert root certificate to the certificates your browser
>> or your operating system trusts. Replicant will use certificates issued by <a
>> href="https://letsencrypt.org/">Let's Encrypt</a> as soon as possible which
>> will solve this issue. Replicant's website is currently hosted by <a
>> href="https://osuosl.org/">OSU Open Source Lab</a> and their infrastructure
>> does not yet support Let's Encrypt.</p></div>
>> +			</div>
>> 		</div>
>> 		<div class="col-md-3">
>> 			<div class="list-group">
>> @@ -65,6 +69,7 @@
>> 				<a href="#replicant-based-omnirom"
>> class="list-group-item">Why is Replicant based on CyanogenMod instead of
>> OmniROM?</a>
>> 				<a href="#shipping-proprietary-components"
>> class="list-group-item">Why doesn't Replicant ship with proprietary components
>> when free replacements are missing?</a>
>> 				<a href="#installing-proprietary-components"
>> class="list-group-item">Why doesn't Replicant guide users through installing
>> complementary proprietary components?</a>
>> +				<a href="#cacert-certificate-error"
>> class="list-group-item">Why do I get a warning message when connecting to the
>> Replicant website with https?</a>
>> 			</div>
>> 		</div>
>> 	</div>


-- 
Website: https://fossencdi.org
OpenPGP: 0F30 D1A0 2F73 F70A 6FEE  048E 5816 A24C 1075 7FC4
Key download: https://wiedmeyer.de/keys/ww.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 818 bytes
Desc: not available
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20170428/3c48ae42/attachment.asc>

From wreg at wiedmeyer.de  Fri Apr 28 17:23:43 2017
From: wreg at wiedmeyer.de (Wolfgang Wiedmeyer)
Date: Fri, 28 Apr 2017 19:23:43 +0200
Subject: [Replicant] [PATCH 4/5] about: Add a bit about myself
In-Reply-To: <20170323170438.3f72b7ef@second-laptop.localdomain>
References: <20170315230142.5705-1-wolfgit@wiedmeyer.de>
 <20170315230142.5705-5-wolfgit@wiedmeyer.de>
 <20170323170438.3f72b7ef@second-laptop.localdomain>
Message-ID: <87mvb0a1k0.fsf@machinist.wiedmeyer.de>


Denis 'GNUtoo' Carikli writes:

> On Thu, 16 Mar 2017 00:01:41 +0100
> Wolfgang Wiedmeyer <wolfgit at wiedmeyer.de> wrote:
>
>> Signed-off-by: Wolfgang Wiedmeyer <wolfgit at wiedmeyer.de>
>> ---
>> -			<p>Replicant is a community-led effort,
>> currently driven by a single developer. [...]
>> +			<p>Replicant is a community-led effort,
>> currently driven by two developers. [...]
> Alternatively, you can also use something like that:
>> Replicant is a community-led effort, currently driven by very very
>> few developers. [...]

I like this version the most, but I'd only use one "very" ;)

> or like that:
>> Replicant is a community-led effort, currently driven by one or few
>> developers. [...]
> This would avoid changing the text each time some new developer starts
> or stops contributing to Replicant.
>
> I'm not totally up to date with reguard to who contribute code or
> patches, but as I understand you are currently the only Replicant
> developer as Paul is busy with other free software projects, and I am
> not contributing any code anymore yet.

There were contributions from others over the last year, namely from Fil
Bergamo and Jookia. So using the formulation "few developers"
definitely fits better.

Thanks,
Wolfgang

> Your formulation or any of the alternative above are okay and the ack
> works for any of them.
>
> [...]
>
> Acked-by: Denis 'GNUtoo' Carikli <GNUtoo at no-log.org>
>
> Denis.


-- 
Website: https://fossencdi.org
OpenPGP: 0F30 D1A0 2F73 F70A 6FEE  048E 5816 A24C 1075 7FC4
Key download: https://wiedmeyer.de/keys/ww.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 818 bytes
Desc: not available
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20170428/e1a4c42d/attachment-0001.asc>

From wordpress at blog.replicant.us  Fri Apr 28 19:02:44 2017
From: wordpress at blog.replicant.us (WordPress)
Date: Fri, 28 Apr 2017 19:02:44 +0000
Subject: [Replicant] Replicant blog post: There won't be a Replicant 6.0 SDK
	because there is already something better
Message-ID: <2fc69574bd5d6aa3284385cbfdaec2dd@blog.replicant.us>

An HTML attachment was scrubbed...
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20170428/478a0fed/attachment.html>