4 ms·

AFAIK, postfix has no history. Only releases.

• cookiengineer 6y ago
  > AFAIK, postfix has no history. Only releases. This is correct. It is also hosted on an original BSD (the b as in berkeley) 0.1 with the RCE affected ftpd 0.1 that had issues with too long usernames and passwords. Oh, it's also hosted via http and ftp only, in case anyone is wondering about security aspects of it. I'm talking about the porcupine server, as it is how the source gets distributed... I mean, gpg signing is fine and all, but if transport can be MITM'ed there's no way to verify the gpg signatures. Contacted the author like hundreds of times, offered to help, but not a single eff was given apparently.
  • yjftsjthsd-h 6y ago
    Is https://github.com/vdukhovni/postfix/commits/master https://github.com/vdukhovni/postfix/commits/master not official?
    • cookiengineer 6y ago
      Nope, ftp.porcupine.org is the only distribution source, from there it gets pushed to mirrors, from there people maintain the history manually. Postfix is really a nightmare project from both the missing collaboration aspects and missing security aspects.
• yjftsjthsd-h 6y ago
  Maybe? https://github.com/vdukhovni/postfix/commits/master https://github.com/vdukhovni/postfix/commits/master I wouldn't call them releases, but they aren't normal commits...
  • deleted 6y ago
    [deleted]
  • gramakri 6y ago
    I think it's just putting releases in a git repo