[snvzz]

I hear tox has been approached before, but they were uninterested.

Remember GNU requires transferring rights to the FSF, which many aren't comfortable with.

I personally favor tox, because ec25519 and full forward secrecy. Also, not fond of SIP.

[paroneayea]

GNU developer here (MediaGoblin lead developer). GNU projects get to decide whether or not to do copyright assignment to the FSF. As an example, MediaGoblin and Guix don't require copyright assignment, while Guile does.

[sitkack]

I have interacted with Tox core devs, the exchange was not pleasant. The overlap between professional and mature (both in social and engineering aspects) seems to very slim in the security space.

[qwertyuiop924]

What did you expect? You know where they come from, right?

If you don't, they come from 4chan. So yeah...

But they got accepted into GSoC as a mentor project, so they can't all be bad.

[qwertyuiop924]

Well, that explains some of it.

I heard tox needs a code review. Has its security been verified in any way?