[Fedora-legal-list] CAcert.org license

[Tom "spot" Callaway]

On Wed, 2008-12-10 at 16:36 +0100, Ciaran Farrell wrote:
> Sorry, I should have been more clear about this. One of the discussion
> points 
> was that the CaCert people were worried about liability if their
> private key 
> were somehow to be compromised. They were therefore seeking to force
> end users 
> to accept some type of disclaimer. To do this, they wanted
> distributors to 
> write it directly into the EULA/SLA.

Yuck. I'm not sure why they think they would have more liability if
Fedora/openSUSE distribute their root certs than they would have if they
only distributed them directly to end users. A traditional disclaimer of
warranty should suffice in such scenarios.

~spot