From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ed1-x536.google.com (mail-ed1-x536.google.com [IPv6:2a00:1450:4864:20::536]) by sourceware.org (Postfix) with ESMTPS id 3EB0C3858407 for ; Mon, 20 Feb 2023 12:34:12 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 3EB0C3858407 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-ed1-x536.google.com with SMTP id f13so3532836edz.6 for ; Mon, 20 Feb 2023 04:34:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=2FV2/hIGGXFhj/sidDPEQhsgLJ61gtqKATyzOR0OALg=; b=i+ExqW7G206RPbC7p6nNaNHq78zfv+JcIpSYyyGGMYPQbLKUBSfKcwvk54l0nP9Rnd VN9Yua/JxrKdrp7KGPxYfDEbXw505/Gv6rhKGWpACHdZxfB0RYxVBaXzfXniMkWEdWhn Livzz6QLl5XFok2CR+puGp1yNDYKdbg+qDJDozsdeKn7eEEdOCWVC0KgQ40zMX+fK2QF HdDFqwct6jXYEgbp/4/d9D9jwMb5oA+/B8COFMrJjrWEseTeAx8+5QyMzbpoAP+68Jsc 6Ds3K2gv4qA18KLJg8MpMSO1f7be6J15KAI4dqsI48z66RGlZ9rJuS/R1I+FodagW+TR OmSw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=2FV2/hIGGXFhj/sidDPEQhsgLJ61gtqKATyzOR0OALg=; b=AoRMwyy72Pd+VwsqGb5Fl4h1vghi+NrVcjgGIU4PEJ1isb3FXJnNUht4ERAeQL8SGn NJ0i6bsjUpJmOic3FRLvkfL6ZpnKDUSQX2Dk1nKGhM9WNwG8tmKV+vF/1j89+yP+gUbo qFZIV/+hd4emvDjeFJ2XdB8kmzCKZbldNNtGePmb1YILDOSI+9geoJSN89Czdue5IGd9 M2pgRX+IRhRH3k6n8RgiFktK4BEUOVQ6QdUJctQ7Xt+YhqNTutqj2t0rhZuTkjg3AyeQ /aSmk3bkKtvtO+ZQDyQSpylbuR1DJcbgtsiIThEENZrD16LG8lbSGjypZIxEg+7YOzXk KqWg== X-Gm-Message-State: AO0yUKXI8EEcWVI9Zevw1c1IjkXK5AY9CkolQ6Si5KsBYv8phlDJwzpt 602HL74+4mEaCDtxGq5ys2ugjpkO3DxYtu0jTiM= X-Google-Smtp-Source: AK7set9y5zbgKTzRmeZNd4SpUjyXHYVO28kmrge7b7CpE0k/rSQOFVEAdK0p+MkpjfNtaEEebUn9UIZ09xI97hbETEA= X-Received: by 2002:a17:906:fcad:b0:8b1:3d0d:5333 with SMTP id qw13-20020a170906fcad00b008b13d0d5333mr4043396ejb.13.1676896450816; Mon, 20 Feb 2023 04:34:10 -0800 (PST) MIME-Version: 1.0 References: <57040213.384865.1676854866253@office.mailbox.org> In-Reply-To: <57040213.384865.1676854866253@office.mailbox.org> From: Jonathan Wakely Date: Mon, 20 Feb 2023 12:33:59 +0000 Message-ID: Subject: Re: Recommendation of Gmail violates mission to respects users freedom To: David Kleuker Cc: "gcc@gcc.gnu.org" Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=3.7 required=5.0 tests=BAYES_20,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,KAM_SHORT,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP,WEBMAIL_BODY autolearn=no autolearn_force=no version=3.4.6 X-Spam-Level: *** X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Mon, 20 Feb 2023 at 10:39, David Kleuker wrote: > > Hello, > > since the GCC project seem not to be reachable in the Fediverse (only Twitter linked on website), i contact you here about this issue. > > https://chaos.social/@davidak/109893176873158932 > > The Free Software Foundation and the GNU project promote and create Free Software that respects users freedom. The GCC Development Mission Statement is "Supporting the goals of the GNU project." > > So i was surprised to see that you recommend the e-mail providers "Gmail, Yahoo, Hotmail, or similar" that are known not to respect the users privacy, on https://gcc.gnu.org/bugzilla/createaccount.cgi. > > I suggest removing the examples since most people coming to the bug tracker should know what an e-mail provider is and instead recommend to use an e-mail alias to protect from spam on the main address. I think we should just drop the recommendation to use a throwaway email account. Or water it down to a much weaker suggestion ("The email address linked to your account might become publicly visible, so if you are concerned about corporate email addresses or other non-public email addresses being exposed, you might want to consider using a different address for your bugzilla account"). Bugzilla doesn't show email addresses to non-logged in users, and account creation is restricted to stop spammers logging in now. Email addresses are shown in barely obfuscated form at https://gcc.gnu.org/pipermail/gcc-bugs/2023-February/812879.html but nowadays spammers have plenty of ways to obtain email addresses that don't rely on scraping web pages. I'm not sure the emphasized recommendation to use web mail accounts really makes sense. What if my primary email account is a web mail account? Does that make me safer from spam? Or should I create a second webmail account just for GCC bugzilla? I think we should just let users decide how to manage their own email infosec.