Comment 3 for bug 1535101

Revision history for this message
Peter Eckersley (pde-lists) wrote :

Hi Thomas,

I'm the upstream lead dev on the python client. We have been working closely with the Debian developers who are packaging our releases. Our current view is that it would be appropriate to package version 0.4.0 or higher of the let's encrypt python client for a LTS release, and a mistake to remove it from xenial.

Although it's true that rapid development is continuing, the client has reached a point of solid beta stability and has in fact already issued around 150,000 certs to Ubuntu 14.04 users in particular (!) We believe that the experience those users would get from native OS packages is much, much better than the one available from the "letsencrypt-auto" script which we have deployed as a crude stand-in for native packages.

There will certainly be many updates to the client through the course of the xenial support window, and our preference would therefore be for Ubuntu to occasionally ship our releases as xenial updates (after an appropriate amount of field testing, of course). But if we had to live with providing security fixes to 0.4.0 or a similar release for the long term, we could even do that too.