Changing `security@freebsd.org' alias

[Kevin D. Kinsey, DaleCo, S.P.]

Peter Pentchev wrote:

>On Wed, Apr 07, 2004 at 10:42:20AM -0500, Jacques A. Vidrine wrote:
>  
>
>>Hello Folks,
>>
>>The official email address for this list is
>>`freebsd-security at freebsd.org'.  Due to convention, there is an email
>>alias for this list: security at freebsd.org, just as there is for
>>hackers@ & freebsd-hackers@, arch@ & freebsd-arch@, and so on.
>>    
>>
>[snip]
>  
>
>>Mistaken early disclosure of a vulnerability can have consequences
>>from the merely embarrasing to catastrophic.  Therefore, I am
>>proposing that `security at freebsd.org' be re-routed to the Security
>>Officer.
>>    
>>
>
>And before you get a flood of nay-sayers, here's a "Go for it!" from at
>least one semi-lurker :)
>
>G'luck,
>Peter
>  
>

Not a nay sayer, but probably worse, here.

Build a better bikeshed:  how difficult would it be
to add an autoresponder that says something like:

"Thanks for your email to the security team.
We will act upon your information ASAP.

In case you were attempting to contact the
security <<discussion>><?> mailing list at
freebsd.org, please resend your mail to: ..."

??

Don't know that it's a need; thought it might
save security-officer@ the trouble of either returning
those mails manually or else Fw:'ing them to the
real list ....

It may not matter; this list is certainly much
quieter than it used to be (with the possible
exception of this post ;-) and therefore that
may happen very little.  A visual diff of the most
recently posted items to freebsd-security shows
little use, but the point is rather obvious....

Kevin Kinsey