On 29/05/2025 2:25 pm, Holger Levsen wrote:
On Thu, May 29, 2025 at 01:30:58PM +0530, Pirate Praveen wrote:I've also seen very very few complaints about the fact that the BTS shows email addresses if submitters and contributors. And I'm definitly not aware that we identified this as a problem!It definitely attracts huge amounts of spam.so does posting to lists.d.o and uploading packages. "you" also want to hide email addresses there? IMO that would be even worse than hiding email addresses in the BTS only.
BTS is more widely used, so it has a higher impact. A user reporting bug only has to interact with bts.
As for lists, I think we should hide email address in the archives too, at least to public and need a verified email to view addresses. Lets look at each of these separately.
the only way to fight spam is to fight spam. not to hide yourself.
These are part of the fighting spam strategy. It does not have to be a binary solution. There can be reasonable restrictions and if people have to target debian to get addresses that itself will avoid many email address harvestors. It does not have to be open to all if we can't prevent everyone.
Using one address per task is part of the spam fighting. So nnn-submitter is an example where you can still reach someone without knowing their email address. If we subscribe to people commenting on bugs by default (like most issue trackers), then posting to the bug will notify everyone. If spammers start abusing, people can just unsubscribe for that bug.
OpenPGP_0x8F53E0193B294B75.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
