by redmail.netbsd.org with SMTP; 6 Mar 2000 15:01:16 -0000
	by rfhs8012.fh-regensburg.de (8.9.3/8.9.3) with ESMTP id QAA14521
	for <tech-security@netbsd.org>; Mon, 6 Mar 2000 16:00:55 +0100 (MET)
Date: Mon, 6 Mar 2000 16:01:11 +0100 (MET)
From: Hubert Feyrer <feyrer@rfhs8012.fh-regensburg.de>
Reply-To: hubert.feyrer@informatik.fh-regensburg.de
To: tech-security@netbsd.org
Subject: Advisory: OpenSSH.ORG is not part of OpenSSH (fwd)
Message-ID: <Pine.GSO.4.10.10003061601010.498-100000@rfhpc8320.fh-regensburg.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII


FWIW

-- 
Microsoft: "Where do you want to go today?"
Linux:     "Where do you want to be tomorrow?"
BSD:       "Are you guys coming, or what?"

---------- Forwarded message ----------
Date: Mon, 6 Mar 2000 07:37:12 -0500 (EST)
From: Louis Bertrand <louis@bertrandtech.on.ca>
Reply-To: Louis Bertrand <louis@openbsd.org>
To: OpenBSD Annnouncements <announce@openbsd.org>
Subject: Advisory: OpenSSH.ORG is not part of OpenSSH

March 6, 2000

To: OpenBSD Mailing Lists

Please be advised that OpenSSH.ORG is NOT the official domain name for
OpenSSH development. The name was taken by a someone not affiliated with
the OpenSSH development team when news of OpenSSH was first leaked to the
community. The correct web and email address for the OpenSSH development
effort is OpenSSH.COM instead of .ORG.

The OpenSSH developers wanted to register under the .ORG top level domain,
traditionally meant for non-profit organisations such as OpenSSH, but the
name had already been taken. They settled for the .COM in the interim. The
.ORG name is currently held by Mr. Alex de Joode <adejoode@zedz.net>, a
proponent of open source cryptography who runs his own free crypto portal
hosted by xs4all.nl, a well-known and respected dutch ISP. Mr. de Joode
has repeatedly refused requests to sell or turn the .ORG name over to the
OpenSSH developers. This leaves us no choice but to issue this advisory.

The OpenSSH.ORG web site currently is a blank page with a link to the
official site. Please do not visit the .ORG site, nor send email to
anybody at the .ORG address. This is more than just a request to boycott:
there could be privacy issues, possibly data mining or building a mailing
list of security conscious users. We simply don't know Mr. de Joode's
motives, and we recommend caution.

Any help or suggestions in breaking the deadlock are appreciated.

Regards

For the OpenSSH developers,
Louis Bertrand <louis@openbsd.org>