From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id iGqsFZ66eWClFgEAgWs5BA (envelope-from ) for ; Fri, 16 Apr 2021 18:26:06 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id oNxjEJ66eWC1QQAA1q6Kng (envelope-from ) for ; Fri, 16 Apr 2021 16:26:06 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 147FC1C0F1 for ; Fri, 16 Apr 2021 18:26:05 +0200 (CEST) Received: from localhost ([::1]:60080 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lXRIA-0007j9-7D for larch@yhetil.org; Fri, 16 Apr 2021 12:26:02 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:36890) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lXENq-0000YS-GD for bug-guix@gnu.org; Thu, 15 Apr 2021 22:39:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:56416) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lXENq-0003ju-8o for bug-guix@gnu.org; Thu, 15 Apr 2021 22:39:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lXENq-0001i4-6C for bug-guix@gnu.org; Thu, 15 Apr 2021 22:39:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#47660: Add link to the ticket when someone reply Resent-From: bo0od Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 16 Apr 2021 02:39:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47660 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Maxime Devos , "Bonface Munyoki K." Received: via spool by 47660-submit@debbugs.gnu.org id=B47660.16185407156540 (code B ref 47660); Fri, 16 Apr 2021 02:39:02 +0000 Received: (at 47660) by debbugs.gnu.org; 16 Apr 2021 02:38:35 +0000 Received: from localhost ([127.0.0.1]:39729 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lXENP-0001hQ-9h for submit@debbugs.gnu.org; Thu, 15 Apr 2021 22:38:35 -0400 Received: from mx1.riseup.net ([198.252.153.129]:39162) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lXENN-0001hB-DT for 47660@debbugs.gnu.org; Thu, 15 Apr 2021 22:38:34 -0400 Received: from fews1.riseup.net (fews1-pn.riseup.net [10.0.1.83]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.riseup.net", Issuer "Sectigo RSA Domain Validation Secure Server CA" (not verified)) by mx1.riseup.net (Postfix) with ESMTPS id 4FM0kq4G4GzDq7Q; Thu, 15 Apr 2021 19:38:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1618540707; bh=jdGAmB6cqQeaON3jrTnO+IyZATLDJyGK/4U/1qnXz6Q=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=c/Tl+XdbjYggb/0iVG/W/zT1mmb+zEMwybSeO1FXit+cQOR88E/O9JYgK68DxFeui hBk6TLQroZwzKM0zuEAd7g3Qhv2OCEOzGmYiVLCbBqV25z/fqDVsOh5uY9xjgGpGAg CDd+yaZ1kqT1nQs4avQQu15UHSS7vl2XBf5OmCw4= X-Riseup-User-ID: 2CE89A543A7BC32A7C1E4DD700B1F392C590991F62A50C265689EBD627214433 Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews1.riseup.net (Postfix) with ESMTPSA id 4FM0kn3dsVz5vjL; Thu, 15 Apr 2021 19:38:25 -0700 (PDT) References: <149fbff7-889c-acc2-09d1-e79edfd29ec0@riseup.net> <3fc025b1-aa56-aec6-5c0a-80f8562f0e8e@riseup.net> <3fb53146-829a-3829-a1b3-2828f6d03e9a@riseup.net> <86im4nmxrs.fsf@bonfacemunyoki.com> <41d350bee8ce1fa0d628bd9e833d6c6ced8765b8.camel@telenet.be> From: bo0od Message-ID: Date: Fri, 16 Apr 2021 02:38:21 +0000 MIME-Version: 1.0 In-Reply-To: <41d350bee8ce1fa0d628bd9e833d6c6ced8765b8.camel@telenet.be> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Mailman-Approved-At: Fri, 16 Apr 2021 12:25:44 -0400 X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 47660@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1618590365; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=RfvuXsmK6QRH9K9Ta2m6rVyLsAdXVJiUGqo8+6n9zn8=; b=Qj2futyhnJvSJQUnllgzLQkO3vGHymQV9j/sbayXNg9Wru78kqigakkLYemG5nlXUayNan f1RCMd1zWnuDo71XHGwQ5G0Y0z9mVLQPE5GdIY1eoFNGKufapYY2R1RJBk33uRDIAyitJp Xkn2mM604gdjuUMEAK6D0xlU8zoyEKh2+WbrmONGYnJ4/gIqB6vqJT/i7OU8nnSpMLDz9I iXlVbZMp8sgh1PwkjTCPeLQcDsNYYw/mFruRiiVwDrKY6PukKiVZv2QsUZRY/3cVwiG2ZD zhjH8899QdzNUa2KyGtjpfWXhPaEubMmwZW2AOXCwcLEdO2cob2K0daEKTle9g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1618590365; a=rsa-sha256; cv=none; b=fCinWEHA0vUJBOcc9iu0AB3SaAoTLyfHxeyC9aHRoaTO4q7CVwPkvUgmYbPbLexnrpkR/c CRzLsMY+RzQmfPzz+RThuH9HAqtVOwo3Jcy0iOTf4X2XKZRkyhLry+klQGR25LGi27Lw69 Mh0nQBokA/ApnHN7/vkCKrFpBpbvtddhIQZUa9xV2uvxlqMp3eBuSVGPZMFDz9z8VybzK7 8yKvWaZOeC1PL4aIK9D/pw88zd7M9tTvMJq1j4IzGYSt8NCdJaysV2xIV29XSJIDS177ec grhjZ+KdHTmDerV3Gr3nK8uN3tI1p9LA9HCHRy265DDPUm2WO2EUF1oKLFx8uQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b="c/Tl+Xdb"; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -1.34 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b="c/Tl+Xdb"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 147FC1C0F1 X-Spam-Score: -1.34 X-Migadu-Scanner: scn0.migadu.com X-TUID: S5OcZVU70flI Not gonna go with details about email thing (not what the ticket is about), But just clarify what you asked: > I couldn't parse this. What does ‘they are exist by names but does nothing’ > mean? having TLS connection is not oh wow im secured now. TLS has versions and many other stuff like ciphers , HSTS ...etc if not all of them lined securely mean secure TLS version, secure ciphers,...etc you gonna have TLS/https just by name, but it makes no different from having it or not. Check for e.g: DEF CON 17 - Moxie Marlinspike - More Tricks for Defeating SSL https://yewtu.be/watch?v=5dhSN9aEljg So as for DNS (DNSSEC..etc). Hope this clarify the sentence. > Guix' bug tracking software is ‘GNU Bug Tracker’. You could ask it on yeah sadly just no respond (wasn't surprised) Maxime Devos: > On Thu, 2021-04-15 at 17:00 +0000, bo0od wrote: >> To be honest i find this bad thing to use emails to do anything rather >> than online registration and not necessary stuff (means being >> encrypted,manipulated.. just not something important) > > To be honest, I find it a bad thing that many projects (I'm looking at > GitHub here (*)) only have a web interface, that require registration > (and often have terms of service I would consider criminal). Then there > are multiple web sites requiring registration that I need to keep track > of. > > (*) Ok, GitHub has e-mail notifications. But I can't directly reply to them, > I need to go to the web interface. At least, that was the case N years ago. > > I like being able to perform all asynchronuous communication via e-mail, > instead of via a dozen platforms. With e-mail, you get signing ‘for free’, > while with $PLATFORMS, you need to rely on each $PLATFORM infrastructure > or resort to ... > > (my intepretation of your words, out of context, with encryption replaced with > signing) >> extra tools, where you have to copy the message into the tool, let the >> tool verify the signature. Or write a message into the tool, let the >> tool create the signature, and copy the message+signature into the web >> interface. > >> Email sucks due to: >> * Messages are not encrypted by default which mean it need an extra tool >> to do it and commonly used is GPG/PGP + it needs tool to implement this >> encryption on the messages which mean mail reader/client most commonly >> one used is thunderbird/icedove <- This method having tremendous >> security issues check for example: [...] > > Not relevant for our purposes. Issues are public. Only PGP for signing is > relevant here. Also, PGP + Evolution works just fine for me, and evolution > doesn't download external attachements by default. > >> * Most of the time (not always) heavily rely on clearnet which mean >> issues of TLS/DNS which needs to be hardened otherwise they are exist by >> names but does nothing. > > I couldn't parse this. What does ‘they are exist by names but does nothing’ > mean? > >> ..This is out of scope to discuss this in details, I just want to see >> the bug URL linked to the bottom of the email i receive thats it. > > Guix' bug tracking software is ‘GNU Bug Tracker’. You could ask it on > that project's mailing lists. Now I see you did that already: > . > > I don't have anything else to say on this topic; I'm not sending further replies. > > Greetings, > Maxime. >