-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

                                        Friday 19 December 2003, 19:00 EST


Unfortunately, we will not be able to make the roll out we'd hoped for
(today), as we have a few minor issues remaining to solve regarding
secured cvs commit access.  We are very close to bringing the savannah
site back up for normal use by existing projects, but that issue must be
resolved first.

We expect to resolve them and roll out by the early morning of Tuesday 23
December 2003 at the latest.  This is an absolute deadline for us -- not
merely a target -- as many key members of FSF's staff will begin holiday
vacations here in the USA.  We are completely committed to bringing the
site back up for existing projects before that happens.

When the site comes back up, you'll likely need to use the "Lost Password"
feature to have a URL sent to you to log in again, and then you'll need to
upload an SSHv2 key through the web interface (all old keys have been
removed from our database).  We'll have a full announcement on the
"Latest News" section of the website when the site returns.


We are thankful for the reports that developers have been sending in
regarding the integrity checks of your code.  Please do continue your work
and report to <address@hidden> when you have completed.  So
far, there has been no trojaned source reported.


You all have been very patient, and we appreciate the words of
encouragement that many of you have sent.  We hope you understand the need
to take just a few more days to be sure that the new environment is as
secure as possible lest we get cracked again.


Finally, I want to give special thanks to Mathieu Roy <address@hidden>,
whom you all may know already as one of the primary hackers working on the
Savannah platform.  He showed the FSF sysadmins today how to roll out the
platform and worked with us to get it running in the new chroot'ed
infrastructure we'd built.  We appreciate the time he's donated to FSF,
and for staying up late to match the work hours in our time zone.


Sincerely,

Bradley M. Kuhn
Executive Director, Free Software Foundation

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/441y53XjJNtBs4cRAhHiAKCecbe6j1D1I50Qt0bLshRgoUQHlwCfdZHo
zZ9BGQcVipmy6wHhjj/snGo=
=WH0L
-----END PGP SIGNATURE-----