Re: [Ring] Important information about the project

[Greg Troxel]

Given your announcement I have two comments/questions.

What kind of CLA/assignment will there be with Jami?  With what entity?
(I personally view most CLA terms and any assignment to other than a
charitable non-profit with a mission to promote free software to be
objectionable, and they have successfully discouraged me from
contributing to multiple projects.)


Entirely separately, I have long had a concern about user tracking and
the DHT architecture.  I hear that Ring is "secure", but that seems to
focus on confidentiality of the traffic (and perhaps integratity/DAO).
There are two additional important properties: confidentiality of
traffic meatdata, and confidentiality of user IP address.  WIthout
really understanding, it seems that if a user registers in the DHT
somehow, then there is some ability for some third party to gain
information about the IP address that the user registered from, when
they are registered, and their mobility patterns.  I don't see
discussion of this risk in things that I've read -- but perhaps I am
failing to read something I should.

Greg