Preliminary hosting wish list (was: Leaving SF)

Lee <[email protected]> wrote:

> On 4/29/14, Fabian Keil <[email protected]> wrote:
> > Lee <[email protected]> wrote:

> >> Have you started a list somewhere?
> >
> > Not yet.

My preliminary hosting wish list is done:

What we need:

- Bug tracker
- Mailinglists (preferably Mailman with public archives)
- Webspace (on a Unix-like OS that works with the webserver targets
  in GNUMakefile)
- Source code repositories (currently CVS, but migrating away
  from it is TODO #54 anyway and shouldn't be too much trouble)
- Commit mails (preferably with unified diffs)

(Unsorted) details to look at when evaluating hosters:

1. Preferably no third-party ads and trackers
   (I do not count "supported by company XYZ" as third-party ad,
    but do count external images, CSS and JavaScript as trackers)

2. JavaScript should be optional or not used at all

3. Services we don't need shouldn't be enabled anyway
   (Web forums, Wikis, Surveys etc.)

4. It would be preferably if the hoster didn't have a bad track
   record as far as user experience, security and privacy are
   concerned and if the terms of services are "reasonable" and
   haven't changed too often in the past. Updates in the past
   should have been improvements and not regressions.

5. It would be preferably if most of the server administration
   is done by a trusted third-party (or at least not a lot of work
   for us).

6. The server(s) should be located in a country with laws we
   can understand and follow (or at least not unintentionally violate).

7. A server location in a country with some kind of due process
   and strong data protection laws (at least on paper) would be
   preferable.

8. Given that Privoxy is a free software project it would be
   preferable if the hoster would use free software where possible.

9. Migrating away from the hoster in the future without loosing
   any important data should be possible without writing web
   scrapers first.

Please let me know if there are any objections of if I
missed something important (I probably did).

Lee's comments are supposed to be included (#1, #4 and #7).

I intend to add the wish list items we agreed upon to TODO #53 in
a couple of days.

> If you do start a list, it might be worth noting the nationality of
> the provider:

I agree.

>      If you use cloud services offered by US companies, then there's
> no corner of
>      the globe where your data is private or safe from the prying eyes
> of the US government.
>  http://www.networkworld.com/community/blog/judge-microsoft-hand-over-cloud-data-no-matter-where-world-it-stored

Unfortunately lots of other countries have prying eyes, too, and are
happy to share data with other countries and/or look away if hostile
secret services (from the "right" countries) illegally operate on
their soil.

> > We currently pay with our users' personal data. In my opinion
> > that's a rather high price given the poor service we get.
> 
> I'm not so sure about poor service .. unless you're talking about how
> long it takes to get a requested change made (like "no-JS editing on
> tickets")?

In my opinion that's one example of poor service, yes.
Forcing poorly-tested updates upon users that are known to be
unwelcome and considered regressions would be another example.

Fabian

------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
&#149; 3 signs your SCM is hindering your productivity
&#149; Requirements for releasing software faster
&#149; Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce

_______________________________________________
Ijbswa-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ijbswa-developers

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)
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=hD4v
-----END PGP SIGNATURE-----