465694 - secure bugmail message to users without keys needs work

Status: RESOLVED WONTFIX

(bugzilla.mozilla.org :: General, defect)

Description

[timeless]

Actual results:
==
From: bugzilla-daemon@
To: reed@
Subject: [Bug 465428] (Secure bug updated)
Date: Tue, 18 Nov 2008 23:13:50 -0800

This email would have contained sensitive information, and you have 
not set a PGP/GPG key in the "Name and Password" section of your user
preferences. In order to receive similar mails in the future, please go
to https://bugzilla.mozilla.org/userprefs.cgi?tab=account
and set a PGP/GPG key.

You can see this bug's current state at: 
https://bugzilla.mozilla.org/show_bug.cgi?id=465428
==

Expected results:
==
https://bugzilla.mozilla.org/show_bug.cgi?id=465428

Bug 465428 changed, however it is marked as containing sensitive information. Bugzilla is configured not to send messages which may contain sensitive information without encrypting them with GPG.

You need to provide a PGP/GPG key of your own in the "Name and Password" section of your user preferences:
https://bugzilla.mozilla.org/userprefs.cgi?tab=account

Until then, each mail sent to you for sensitive bugs will look like this one.

==
Notes:
1. a bug's summary may not contain sensitive information and a bug change may merely be adding a cc, as such the bugmail might not have itself been sensitive, but bugzilla can't know that. Bugzilla shouldn't assert that the mail it squelched is sensitive.
2. people will receive mail, what they want to receive is useful mail "receive similar mails" is a mess.

Comment 1

[timeless]

<dveditz> I would prefer putting the "you can see this at..." link at the top,
and the boilerplate nag/hint paragraph second

which is indeed one of the changes i made :)

Comment 2

[Samuel Sidler (old account; do not CC)]

I'd really prefer if it told me what changed... Can it do that?

For example:
  The CC list was changed.
  A comment was added.
  The summary was changed.
  A flag was changed.

I can probably pull this from headers, but since a useless email is being sent anyway, it'd be nice to know if I should click through or not.

Comment 3

[:glob ✱]

closing bug due to inactivity.  please re-open this bug if still relevant.