spamassassin-dev December 2011 archive
Main Archive Page > Month Archives  > spamassassin-dev archives
spamassassin-dev: [Bug 6656] sa-update could send more informati

[Bug 6656] sa-update could send more information to help mirrors/project track issues

From: <bugzilla-daemon_at_nospam>
Date: Sat Dec 31 2011 - 10:56:59 GMT
To: dev@spamassassin.apache.org

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6656

Michael Scheidell <scheidell@secnap.net> changed:

           What |Removed |Added
----------------------------------------------------------------------------
                 CC| |scheidell@secnap.net

--- Comment #1 from Michael Scheidell <scheidell@secnap.net> 2011-12-31 10:56:59 UTC ---
I (as a mirror operator) would appreciate this,

However, as a security/privacy professional, I would be upset to the MAX if
sa-update was sending my internal (behind nat) private ip address.

I believe it would violate privacy and security policies at major companies,
and could possibly even violate EU data privacy and protection laws.

(we also do IT security audits, and no, you don't want to give ANYONE, a clue
about your internal structure).

Trust the sa-update ops? yep, good, then why pgp signatures?

Post this question in sa users group, and don't do it like a poster for a
political party:

1) should we reveal internal private information about your network to
sa-update operators.

or

2) should we improve sa-update?

(be careful how you approach question.. )

-- Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.