Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Gervase Markham
Reed Loden wrote: I disagree with adding AUS to the main security group. By doing that, you force the AUS developers to join the security group, which means they have to deal with all the mass of mail/bugmail that comes through for product stuff that does not affect AUS at all. Instead, I

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Eddy Nigg (StartCom Ltd.)
Gervase Markham wrote: Can anyone else see disadvantages to having six security groups? That would basically be one per product for the non-end-user products: Having to subscribe to at least some 3 or 4 security groups is a pain...and higher the chance to miss on important topics...Are that

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Reed Loden
On Wed, 31 Jan 2007 13:39:09 +0200 Eddy Nigg (StartCom Ltd.) [EMAIL PROTECTED] wrote: Having to subscribe to at least some 3 or 4 security groups is a pain...and higher the chance to miss on important topics... By security groups, we are talking about groups in our bug tracking system

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Christopher Aillon
Gervase Markham wrote: Reed Loden wrote: I disagree with adding AUS to the main security group. By doing that, you force the AUS developers to join the security group, which means they have to deal with all the mass of mail/bugmail that comes through for product stuff that does not affect AUS

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Reed Loden
On Wed, 31 Jan 2007 10:43:54 -0500 Christopher Aillon [EMAIL PROTECTED] wrote: Can we get a good explanation as to how people will be flooded with bugmail first? I fail to see how that is the case. Sure, if they watch the security@ alias, but not with proper component watching and mail

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread L. David Baron
On Wednesday 2007-01-31 10:43 -0500, Christopher Aillon wrote: Can we get a good explanation as to how people will be flooded with bugmail first? I fail to see how that is the case. Sure, if they watch the security@ alias, but not with proper component watching and mail filtering. It's

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Gervase Markham
Eddy Nigg (StartCom Ltd.) wrote: Having to subscribe to at least some 3 or 4 security groups is a pain...and higher the chance to miss on important topics...Are that many really needed? There seems to be some misunderstanding. These are not mailing lists one subscribes to, but groups within

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Reed Loden
On Wed, 31 Jan 2007 10:03:29 -0800 L. David Baron [EMAIL PROTECTED] wrote: Agreed. You don't want too few people in one of the security groups, since that just makes it more likely that security-sensitive bugs will go unnoticed because two of the three people with access to them are on

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Gervase Markham
Christopher Aillon wrote: Gervase Markham wrote: Reed Loden wrote: I disagree with adding AUS to the main security group. By doing that, you force the AUS developers to join the security group, which means they have to deal with all the mass of mail/bugmail that comes through for product stuff

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Christopher Aillon
Reed Loden wrote: On Wed, 31 Jan 2007 10:43:54 -0500 Christopher Aillon [EMAIL PROTECTED] wrote: Can we get a good explanation as to how people will be flooded with bugmail first? I fail to see how that is the case. Sure, if they watch the security@ alias, but not with proper component

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Reed Loden
On Wed, 31 Jan 2007 13:27:26 -0800 Dan Veditz [EMAIL PROTECTED] wrote: Gervase Markham wrote: At the moment, for example, I'm a member of webtools-security and so I get mail whenever a LXR, Mozbot, etc. security bug is filed even though I have nothing to do with those projects. Maybe

Re: bugzilla.mozilla.org security group reorganisation proposal

2007-01-31 Thread Christopher Aillon
Reed Loden wrote: Actually, a better plan might be to separate Bugzilla from the rest of the webtools, which is part of what has been proposed. Gerv is a Bugzilla hacker, but he does not deal with the other webtools. Currently, all the webtools (including Bugzilla) use webtools-security and send

Re: Study questions EV certs effectiveness?

2007-01-31 Thread beltzner
On 1/30/07, Ka-Ping Yee [EMAIL PROTECTED] wrote: That's interesting. Where is the design discussion about the UI taking place? There's been no real design discussion about how to surface EV certificates in Firefox yet, really. But I'm pretty well established on record as saying that the