[webkit-dev] Hosting precompiled `jsc` binaries for Linux

[JF Bastien]

On Tue, Dec 12, 2017 at 11:27 AM Mathias Bynens <mths at google.com> wrote:

> Ideally, projects such as jsvu wouldn’t have to make such decisions. They
> would trust the maintainer of the JS engine, in this case Apple, to provide
> the downloads.
>
> If Apple trusts Igalia enough, that’s Apple’s decision. Projects such as
> jsvu shouldn’t have to duplicate that decision IMHO. The way to do that is
> to host binaries on an official domain.
>

It sounds like our disconnect is on who maintains JSC outside of Apple
ecosystems. The GTK port is not maintained by Apple, though we work closely
with the maintainers and avoid breakage where we can.


On Tue, Dec 12, 2017 at 8:21 PM, Alexey Proskuryakov <ap at webkit.org> wrote:
>
>>
>> 12 дек. 2017 г., в 10:58, Mathias Bynens <mths at google.com> написал(а):
>>
>> Yes, there is such an expectation. jsvu has a policy of only using URLs
>> “that are controlled by the creators of the JavaScript engine”:
>> https://github.com/GoogleChromeLabs/jsvu#security-considerations
>>
>>
>> This is explained as a security policy. If the project considers Igalia
>> builds unsafe, how are the same bits copied to another domain by an
>> automated process any better?
>>
>> I'm not necessarily objecting against the copying, but trying to make a
>> legitimate story for why any extra work is needed.
>>
>> - Alexey
>>
>>
>> Anything not on *.webkit.org or similar, or anything not on on S2
>> buckets that are owned by Apple directly, does not fit that policy.
>>
>> On Tue, Dec 12, 2017 at 7:35 PM, Alexey Proskuryakov <ap at webkit.org>
>> wrote:
>>
>>>
>>> 12 дек. 2017 г., в 1:34, Mathias Bynens <mths at google.com> написал(а):
>>>
>>> It would be great to make such downloads available from webkit.org or
>>> a similar domain!
>>>
>>>
>>> Can you explain in more detail why this is important?
>>>
>>> If there is an expectation that this will make the builds more official
>>> in some way, then I'd like to understand the difference better. For
>>> example, will having links to igalia.com on webkit.org work just as
>>> well?
>>>
>>> - Alexey
>>>
>>>
>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-dev/attachments/20171212/c243f48a/attachment.html>