cla-assistant VS Signal-Server

I was curious about the automated CLA process. It is interesting to me to read the answer about not supporting GitLab:

https://github.com/cla-assistant/cla-assistant/issues/534

Very terse answer that says:

  As you noticed, this would mean a completely different line of code

Open source Contributor License Agreement assistant

I'm currently using https://cla-assistant.io/ just to be sure.

I use CLAAssistant and do not accept PRs without it https://cla-assistant.io/ - not that there are any notable PRs, mostly README typo fixes and such.

Signing the CLA can be automated and I highly recommend you set up this process with the help of this CLA assistant. You can also find some ready-made CLA texts out there just waiting for you to be (responsibly) copied and pasted.

You can do that wirh CLA helpers (used for some very high volume projects). For ex, https://github.com/cla-assistant/cla-assistant (this will only work if you have a Github org though as it uses Github to track people who signed)

> They could at least BSL the server code and allow others to verify the server code and host but not compete.

This is exactly what they do (except they use AGPL): https://github.com/signalapp/Signal-Server

https://github.com/signalapp/Signal-Server/blob/main/service/src/main/java/org/whispersystems/textsecuregcm/push/APNSender.java for APNs push notification payloads

git clone https://github.com/signalapp/Signal-Server.git

yes it is available here https://github.com/signalapp/Signal-Server/blob/main/service/pom.xml

You could also start your own signal server, but with blackjack, and hookers

The fact that it locks you into using their servers, does not distribute on F-Droid (only Google Play OR an APK with an insecure update mechanism), and has a completely closed-source "abusive message filter" module server side, that could functionally be used for censorship, storing messages for future decryption, or any other number of nefarious purposes - we have no idea since it's not open source (https://github.com/signalapp/Signal-Server/blob/main/.gitmod...).

Additionally, you cannot distribute branded forks or Signal, and if you do fork it, your fork is not allowed to connect to Signal's "official" OWS (open whisper systems) servers - hostility to federation should be viewed with prejudice and suspicion at the very least, it suggests a vested interest in a single point of failure (or control), which goes against user interests.

Further reading: https://drewdevault.com/2018/08/08/Signal.html

It’s actually the signal server that isn’t reproducible because of the abusive message filter that’s in a private repository. It’s clear as day here: https://github.com/signalapp/Signal-Server