On Sun, 14 Jan 2018 14:03:22 -0500, J Albrecht wrote:
>> On 14 Jan 2018, at 12:01, Pascal Obry <[email protected]> wrote:
>> 
>> Right, probably closer to Linux than Windows is. But yet, we have a
>> single MacOS guy for the maintenance and he is not available actually
>> to do the work. That illustrate my point :)
>
> The point is not so pointy. There have actually been a number of people who 
> have offered to help in this regard. Yet, the offers were either rejected or 
> ignored. It seems that this is a 'closed club'. 
>
> Once again: I'd be quite happy to help package for MAC OS - even as Parafin's 
> third-rate 'apprentice' to assist in getting these things out when he's not 
> available. I've already successfully compiled 2.4.0 on my Mac box. I've just 
> not been able to produce a functional Disk Image. I need assistance in that 
> regard. Unlike Robert Krawitz suggests, I don't feel that it's necessary to 
> 'sign' the DMGs; the packages have been provided unsigned for as long as 
> they've been available. Nobody expects them to be signed now! Furthermore, no 
> current user expects them to be available on Apple's bespoke store. People 
> would just like them to be available on the dt site ;-)

Speaking from experience, I strongly suggest signing the package.
Current users may be OK with the workaround, but growing the userbase
will require pulling in new users who don't want to turn off the
signing requirement (which is there for a reason, and even if it
weren't, is something Apple strongly discourages and Mac users tend to
listen to Apple).

When the signing requirement first came out (10.10, IIRC), we were
deluged with compaints from users that Gutenprint wouldn't install on
their Macs.  If you go this route, be prepared for complaints -- loud,
vociferous ones.  And since Darktable has been getting publicity as a
solution on Windows, you can expect more Macintosh users (not just
curent ones) to want to get in on the act.  The "workaround" of
turning off package signing won't fly with them, and it will suggest
that it's bundled with malware.  And it will also make it more
difficult for you if third parties pick up Darktable, bundle it with
ad/mal/junkware and distribute it themselves, since your instructions
to turn off signature verification will make it easier for these
operators.

The issue of the Store is something there's no workaround for (other
than relicensing, which I doubt will fly with the project team and
would not have passed muster with Gutenprint even if we had wanted to
distribute it that way).  There's plenty of reputable software not
distributed through the Store, so I don't think that will be a problem
for you.

But I very strongly suggest, based on our experience with Gutenprint,
that you get a certificate and sign the package.
-- 
Robert Krawitz                                     <[email protected]>

***  MIT Engineers   A Proud Tradition   http://mitathletics.com  ***
Member of the League for Programming Freedom  --  http://ProgFree.org
Project lead for Gutenprint   --    http://gimp-print.sourceforge.net

"Linux doesn't dictate how I work, I dictate how Linux works."
--Eric Crampton
____________________________________________________________________________
darktable user mailing list
to unsubscribe send a mail to [email protected]

Reply via email to