816736 - Bugmail for "Confidential Partner Data" bugs is sent unencrypted

Status: RESOLVED WONTFIX

(bugzilla.mozilla.org :: Extensions, defect)

Description

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

I don't use S/MIME or GPG but the bugmail for bugs like bug 815419 is sent to me unencrypted. All Mozilla-confidential and Partner-confidential bugmail should be protected like security-group bugmail.

Comment 1

[:glob ✱]

i don't have access to that bug, so i can't comment on it directly.

i don't think that mozilla-confidential bugs should trigger encryption, as i feel it would cause more trouble than it's worth (eg. all webmail users, including those using zimbra, will no be able to view email within their email cient, sanitisation of subjects, etc.).

security sensitive bugs should be secured by a security group.

Comment 2

[Gervase Markham [:gerv]]

I think you'd need to get wide buy-in from the people affected before implementing this. Setting up S/MIME or GPG is still non-trivial in many mail clients, and near-impossible in webmail clients. So a lot of people would lose a valuable notification service.

If partners are not agitating for this, I don't think we should impose it.

Gerv

Comment 3

[:glob ✱]

(In reply to Gervase Markham [:gerv] from comment #2)
> If partners are not agitating for this, I don't think we should impose it.

agreed .. and the nature of the group (it's empty) means even collating a list of people to ask would be difficult.