Re: How can I contact the crypto team?

On Tue, Jun 23, 2026 at 6:32 AM Daniel P. Berrangé <[email protected]> wrote:
>
> On Tue, Jun 23, 2026 at 12:04:25PM +0200, Fabio Valentini wrote:
> > On Tue, Jun 23, 2026 at 10:57 AM Alexander Sosedkin
> > <[email protected]> wrote:
> > >
> > > On Tue, Jun 23, 2026 at 12:46 AM Gordon Messmer
> > > <[email protected]> wrote:
> > > >
> > > > Fedora's crypto policies say that I should talk to crypto-team about
> > > > adding a new crypto library to Fedora, and refers to a mailing list
> > > > which requires membership to send messages.
> > >
> > > Huh, that doesn't sound right to me indeed,
> > > one should be able to just send emails to it.
> >
> > FWIW I had the same experience. Sending emails to this list was
> > equivalent to sending them to /dev/null.
>
> Is the list even working ? The archives are restricted so not visible
> if you don't login (why can't they be public ?), and once logging in,
> the archives appear to be completely empty. Has archiving been
> disabled ?
>
>   https://lists.fedoraproject.org/archives/list/[email protected]/
>
> > As for AWS-LC support in Fedora - I have been waiting for a definitive
> > answer on that for over a year now:
> > https://bugzilla.redhat.com/show_bug.cgi?id=2350145
> >
> > At this point both a definitive "yes" and a definitive "no" would both
> > be better than radio silence.
>
> At what point do we say the process is broken, and we need to change
> the guidelines to remove the special gate keeping rule for crypto ?
> This feels overdue for a proposal to FESCO to change the guidelines
> to something that is workable without such delays.
>
> As long as it is not causing regression in existing distro behaviour/
> features for crypto, let crypto best practice problems[1] be addressed
> asynchronously after the package is imported.
>

You beat me to suggesting the same thing. :)

I think we're at the point that almost every process that gates on a
Red Hat team needs to be evaluated and potentially removed. Most of
them are mired in similar problems.

There hasn't been a "Fedora Crypto Team" in a very long time, probably
not since the last attempt at unified crypto over a decade ago. The
Security Team was also defunct, but is slowly being restarted with
community leadership instead of Red Hat participants.

This is a systemic problem. :(


-- 
真実はいつも一つ！/ Always, there's only one truth!
-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new