[Xylakant]

You're off on your numbers. The 120k are for him plus one developer. By that estimate that's 20 people for the FSF.

However, a lot of commercial entities use pgp as core of their business: all software packaged for the linux world is signed with gpg one way or another. All commercial distributions depend on it at their very core. I'm amazed that they don't fund gpg at least partially.

[reidrac]

I'm not surprised. For the same reason OpenSSH should be very well founded, and if I recall correctly it's not the case.

One of the points of open source is that software becomes a commodity, and that will always hurt OSS founding.