--Sig_/oAUzf90o8jgGvtMD6oTMg8n
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

On Sun, 5 Jan 2020 07:42:07 +1300
Ben Cooksley <bcooksley@kde.org> wrote:
> To my knowledge we haven't yet attempted to setup an account with
> Apple at this time.
>=20
> I guess the first question would be whether we'd be looking to (and
> are we even able to - didn't they have GPL issues at some point?)
> upload applications to the Mac store?

=46rom what I understand, the basic problem is that the Mac store
requires users to agree to their ToS, and those say - among other things
- that you may not re-distribute whatever you get from the store.

Now, arguably, that restriction is not terribly relevant as long as you
can _also_ get the same software elsewhere, but technically it _is_ an
additional restriction imposed on the user, and thus forbidden under
the GPL. Thus, anybody with the right to any GPL'ed piece of code in
what we upload would be rightfully entitled to ask Apple to stop
distributing under those terms.

Technically, and morally, the fault sits square on Apple, as far as I
can see. Practically the outcome would be that Apple simply pulls the
app from the store - and quite possibly everything else from the same
developer (us) as well.

In other words, that path does seem problematic, indeed. I don't really
see, why it would be the _first_ question to answer, though. Getting a
certificate and signing the distributed images actually looks like a
good idea to me, in its own right. A second, separate step might be to
submit images to Apple for "notarization" (which, as far as I can see,
is essentially Apple running a malware scanner over the image). To my
understanding, neither of these would preclude us from uploading to the
Mac store, should that become possible and necessary in the future(*).

Regards
Thomas

(*): My guess is that it will eventually become necessary, but not
possible in a future version of MacOS. But that's a story for another
day.

--Sig_/oAUzf90o8jgGvtMD6oTMg8n
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
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=XCl6
-----END PGP SIGNATURE-----

--Sig_/oAUzf90o8jgGvtMD6oTMg8n--