You're completely right, I won't follow security experts' ideas on UI, just as
I won't follow a UX designers' ideas on security.
I was happy to act as the go between to fix a long-standing problem, only to be told 6
month later that they accepted the
change because we gave them a choice that was never even put on the table.
The only possible effect of that is that we won't ask "security experts"
again. At least those ones.
----- Original Message -----
Am 08.12.2014 um 15:45 schrieb Bastien Nocera:
>>>> On 12/08/2014 12:51 PM, Bastien Nocera wrote:
>>> <snip>
>>>> This is wrong and you know about that - the firewalld folks have been
>>>> urged to use this zone for the Workstation product - it was a
>>>> Workstation team decision.
>>>
>>> What?! We discussed it, and it was deemed acceptable by you, and mitr.
>>> We went back and forth on this, and you agreed that it was a good
>>> cost/benefit decision.
>>>
>> We could choose between removing firewalld and accepting this zone ...
>
> Which you could have refused if you felt that it was an unacceptable
> compromise.
> Which you didn't do. Are you still going to argue that this wasn't
> _vouched_ for
> by you and the other firewall stakeholders?
Google translates "vouched" to "verbürgt"
suck something is not guarantee for it
beeing forced to accept something or get the firewall completly dropped
in the product is the opposite of a open discussion
to be honest the way you agrue in this thread "it's the applications
fault if it listens to a port and not ours that we make the OS wide
open" don't let you appear as somebody who is open for a security
discussion killed always with "but then some things don't work magically
and we want that for user expierience" so you hardly would follow
advices from security experts no matter what they say
--
devel mailing list
devel(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct:
http://fedoraproject.org/code-of-conduct