Subject: bug#68962: closed (Re: bug#68962: website: directly link the security mail address)

From: [email-masked] (GNU bug Tracking System)
Date: Thu, 30 May 2024 13:48:02 +0000

Your bug report

#68962: website: directly link the security mail address

which was filed against the guix package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
68962: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=68962
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#68962: website: directly link the security mail address
From: Maxim Cournoyer <[email-masked]>
To: Jonathan Brielmaier <[email-masked]>
Cc: [email-masked]
Date: Thu, 30 May 2024 09:45:50 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

Hi Jonathan,

Jonathan Brielmaier <[email-masked]> writes:

> Is there a reason why we don't link to the mail alias directly on the
> security page:
> https://guix.gnu.org/en/security/
>
> Because the mailman archive doesn't make really sense for most of the
> users as it's only accessible with a password.
>
> What about this small patch?
>
> ```
> diff --git a/website/apps/base/templates/security.scm
> b/website/apps/base/templates/security.scm
> index 8a72950..429e5df 100644
> --- a/website/apps/base/templates/security.scm
> +++ b/website/apps/base/templates/security.scm
> @@ -43,7 +43,7 @@ system|GNU Hurd|GNU Guix package manager|Security
> updates") #\|)
>           `(p
>             "To report sensitive security issues in Guix itself or the
>              packages it provides, you can write to the private mailing
> list "
> -          (a (@ (href
> "https://lists.gnu.org/mailman/listinfo/guix-security"))
> +          (a (@ (href "mailto:[email-masked]"))
>                ("[email-masked]")) ".  This list is monitored by a
>              small team of Guix developers."))
>         ,(G_
> ```

LGTM.  I've pushed it.

-- 
Thanks,
Maxim

Subject: website: directly link the security mail address
From: Jonathan Brielmaier <[email-masked]>
To: [email-masked]
Date: Wed, 7 Feb 2024 00:19:51 +0100
List-Id: <debbugs-submit.debbugs.gnu.org>

Is there a reason why we don't link to the mail alias directly on the
security page:
https://guix.gnu.org/en/security/

Because the mailman archive doesn't make really sense for most of the
users as it's only accessible with a password.

What about this small patch?
```
diff --git a/website/apps/base/templates/security.scm
b/website/apps/base/templates/security.scm
index 8a72950..429e5df 100644
--- a/website/apps/base/templates/security.scm
+++ b/website/apps/base/templates/security.scm
@@ -43,7 +43,7 @@ system|GNU Hurd|GNU Guix package manager|Security
updates") #\|)
          `(p
            "To report sensitive security issues in Guix itself or the
             packages it provides, you can write to the private mailing
list "
-          (a (@ (href
"https://lists.gnu.org/mailman/listinfo/guix-security"))
+          (a (@ (href "mailto:[email-masked]"))
               ("[email-masked]")) ".  This list is monitored by a
             small team of Guix developers."))
        ,(G_
```

Or is this an anti-spam measure?

~Jonathan