4 ms·
I've been thinking about licensing recently, in the context of package managers. How can you allow people to install and update commercial packages, without th
by porker 10y ago
I've been thinking about licensing recently, in the context of package managers.
How can you allow people to install and update commercial packages, without the problem that anyone can use any key?
I'm thinking particularly in terms of software which is licensed to run on 1 domain, 3 domains, 5 domains etc - but as soon as you use a CLI package installer, you don't know the domain being used.
- ezekg 10y agoI'll be handling it the same way Stripe handles their libraries: https://github.com/stripe/stripe-node#api-overview https://github.com/stripe/stripe-node#api-overview. Account tokens are cryptographically sound enough so that it would take ages to 'find' a correct token, much less the correct token AND account. Restricting licenses by domain would need to be handled outside of Keygen; you can track the allowed machines (via fingerprinting) through the Keygen API, and then act accordingly.