On Mon October 20 2008, Les Mikesell wrote:
> Till Maas wrote:
> > On Sat October 18 2008, Matthew Woehlke wrote:
> > [E-mail was changed]
> >
> >> Um... which is actually another reason for local mail being default; in
> >> the event a user's mail recipient is not configured, it goes to a local
> >> spool only readable by root and that user. If Sue sets up a computer and
> >> adds an account for Bob, it's not really ideal if Bob's mail gets sent
> >> to sue@EXAMPLE.com because Bob doesn't have a recipient specified.
> >
> > Sending log file contents that may contain sensitive data via unencrypted
> > e-mail is not a good thing to do imho.
>
> Modern MTA's can encrypt transmission if configured to.

Yes, this is possible, but how does this help a non technical user that does
not know how to this? Also only the encryption of the e-mail itself and
decrypting on a trusted machine really protects the sensitive data. This is
probably to complicated for the targeted user, so it would be a lot easier to
keep the data on the local machine.

Regards,
Till
--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list

On Tue, 2008-10-21 at 12:59 +0200, Till Maas wrote:
> Yes, this is possible, but how does this help a non technical user
> that does not know how to this?

Our Exim package should be using TLS by default on all outgoing
connections (to mail servers which support it). And supporting TLS on
incoming connections too.

If there are any _other_ ways it can be improved to help the users who
are technical enough to want it, but not particularly familiar with it,
then please file RFE bugs. We already ship sample config snippets for
decent greylisting, spamassassin, clamav, etc.

--
David Woodhouse Open Source Technology Centre
David.Woodhouse@intel.com Intel Corporation

--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list

On Tue October 21 2008, David Woodhouse wrote:
> On Tue, 2008-10-21 at 12:59 +0200, Till Maas wrote:
> > Yes, this is possible, but how does this help a non technical user
> > that does not know how to this?
>
> Our Exim package should be using TLS by default on all outgoing
> connections (to mail servers which support it). And supporting TLS on
> incoming connections too.
>
> If there are any _other_ ways it can be improved to help the users who
> are technical enough to want it, but not particularly familiar with it,
> then please file RFE bugs. We already ship sample config snippets for
> decent greylisting, spamassassin, clamav, etc.

I do not know, because I use gpg for encryption. And this was also not what
this sub thread initially was about. It was about adding an option to the
installer that may make unexperienced users send sensitive data via untrusted
or unencrypted paths.

Regards,
Till
--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list

On Tue October 21 2008, David Woodhouse wrote:

> If there are any _other_ ways it can be improved to help the users who
> are technical enough to want it, but not particularly familiar with it,
> then please file RFE bugs. We already ship sample config snippets for
> decent greylisting, spamassassin, clamav, etc.

Uh, I should have thought faster while writing my previous mail, here is my
RFE to make it easier to gpg encode mails:

https://bugzilla.redhat.com/show_bug.cgi?id=467867

Thanks & regards,
Till
--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list

David Woodhouse wrote:

On Tue, 2008-10-21 at 12:59 +0200, Till Maas wrote:

Yes, this is possible, but how does this help a non technical user
that does not know how to this?


Our Exim package should be using TLS by default on all outgoing
connections (to mail servers which support it). And supporting TLS on
incoming connections too.


Sendmail should do that too.


If there are any _other_ ways it can be improved to help the users who
are technical enough to want it, but not particularly familiar with it,
then please file RFE bugs. We already ship sample config snippets for
decent greylisting, spamassassin, clamav, etc.


Including a MimeDefang package configured to do the same for sendmail
would be good.


--
Les Mikesell
lesmikesell@gmail.com

--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list

Lutz Lange wrote:

i've just wondered why sendmail is still the default MTA in Fedora.
Please enlighten me?


Changing defaults only makes sense if we're going to get rid of the
current default or we're going to put a lot of work into the
alternative. Sendmail isn't about to disappear, and we don't do a lot
of distro-specific work on MTAs, so there's little point to changing.
If you prefer a different MTA, use it.


-- Chris

--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list