https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6656

Michael Scheidell <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #1 from Michael Scheidell <[email protected]> 2011-12-31 
10:56:59 UTC ---
I (as a mirror operator) would appreciate this, 

However, as a security/privacy professional, I would be upset to the MAX if
sa-update was sending my internal (behind nat) private ip address.


I believe it would violate privacy and security policies at major companies,
and could possibly even violate EU data privacy and protection laws.

(we also do IT security audits, and no, you don't want to give ANYONE, a clue
about your internal structure).  

Trust the sa-update ops? yep, good, then why pgp signatures?

Post this question in sa users group, and don't do it like a poster for a
political party:

1) should we reveal internal private information about your network to
sa-update operators.

or

2) should we improve sa-update?


(be careful how you approach question.. )

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to