[newmaint-site] Privacy leaks, and do they matter?

Enrico Zini enrico at enricozini.org
Mon Feb 9 10:11:26 UTC 2015


Hello,

take for example this page:
https://contributors.debian.org/contributor/myon%40debian

Although the emails are hidden, they still show in the "extra info"
links, because they are needed to identify the person in most of those
links.

At the moment, there is an inconsistency and a false sense of privacy,
because the emails are hidden, but not quite.

I can see two short term options:

 1. Hide the "extra info" links unless one is logged in;
 2. Just do not hide email addresses, and if one doesn't want to make an
    email identifier public, they can hide it using the identity
    management features of the site.

I'm quite attached to the "extra info" links, and given that the
identity management can act as as mitigation, I have a preference for
option 2. What do you think?


Enrico

-- 
GPG key: 4096R/E7AD5568 2009-05-08 Enrico Zini <enrico at enricozini.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/newmaint-site/attachments/20150209/f5ab4ffe/attachment.sig>


More information about the newmaint-site mailing list