Re: patch - BigSQL packages on Download

From: "Rader, David" <davidr(at)openscg(dot)com>
To: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
Cc: Dave Page <dpage(at)pgadmin(dot)org>, PostgreSQL WWW <pgsql-www(at)postgresql(dot)org>
Subject: Re: patch - BigSQL packages on Download
Date: 2016-05-03 16:51:08
Message-ID: CAABt7R7w7-dTB1dEVpo8P0VzDWBP6TWOw8Bhadq8wqCZ5kujrw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-www

Josh -

There are 2 types http requests - the first being to download pgAdmin or
PostgreSQL Studio if selected by the user. The description for those
components says that a xxMB download is required and the user could choose
to not install them to avoid the http request.

The 2nd type is to update the list of components and versions available for
install or update - which we are going to change to be explicit rather than
implicit. I think _most_ users today expect auto checks to see if updates
are available (think every smart phone, modern OS X and Windows, desktop
apps like Atom, etc, etc). But it's not the majority of casual users that
complain about privacy issues - it's the small group of vocal people
concerned enough to look that do. So we are going to change to not update
the package list during the install but leave it to the user for afterwards.

-Dave

--
David Rader
davidr(at)openscg(dot)com

On Tue, May 3, 2016 at 12:31 PM, Joshua D. Drake <jd(at)commandprompt(dot)com>
wrote:

> On 05/03/2016 02:00 AM, Dave Page wrote:
>
> In general though, I do not feel it's appropriate to list these
>> packages at all, given that they make silent outbound HTTP calls
>> during installation, without the user being made aware of that or
>> being given any option to object. That could easily be considered a
>> privacy issue by people, one that may come back to bite us for hosting
>> the downloads on our primary listing.
>>
>
> I was under the impression that it is not in fact silent and that the page
> says what it is doing?
>
> David, can you explain what is going on here?
>
> Sincerely,
>
> JD
>
>
>
>
> --
> Command Prompt, Inc. http://the.postgres.company/
> +1-503-667-4564
> PostgreSQL Centered full stack support, consulting and development.
> Everyone appreciates your honesty, until you are honest with them.
>

In response to

Responses

Browse pgsql-www by date

  From Date Subject
Next Message Joshua D. Drake 2016-05-03 17:05:26 Re: patch - BigSQL packages on Download
Previous Message Joshua D. Drake 2016-05-03 16:31:29 Re: patch - BigSQL packages on Download