4 ms·
It is pretty off-putting to me that such a critical piece of infrastructure isn't developed completely in the open, especially with such a large amount of secur
by spullara 12y ago
It is pretty off-putting to me that such a critical piece of infrastructure isn't developed completely in the open, especially with such a large amount of security code. Companies get criticized all the time for this style of open source development.
- danpat 12y agoIt's not like the postfix code is hidden, or even difficult to find. Nothing is being done in secret here. If you want to work on a new feature that'll take a long time and require several people, grab the code, stick it in git, and work on it with your team. Once the work is done, send a patch to the postfix maintainer, and he'll merge it if it's worthwhile. Linus created git because the above workflow was killing him trying to handle the patches for the Linux kernel. He was doing it almost exactly as described above for a long time. I suspect postfix sees a far lower volume, and the above workflow probably works just fine.
- shadowfox 12y agoYou still can audit the code for security purposes pretty easily using the tarballs if you were so inclined. While granular commits (of the sort you see with public repos) are useful, they are by no means necessary for this sort of thing.