Package: bugs.debian.org Severity: wishlist Hi
[Please Cc team@security.d.o for futher discussion/followup questions] If one uses reportbug to fill bugs, which are tagged with security tag, reportbug adds a X-Debbugs-CC to the security team as team@security.d.o. If one submits though a bug via regular mail, adding Tags: security, the security team does not get notified via mail on this this report directly. We would like to see that the security team alias gets any bug filled with Tags: security initially. It's not needed to get any conversation of security tagged bugs if the alias is not explicitly cc'ed. As an example, https://bugs.debian.org/895658 was filled via submit@bugs.d.o filling out the pseudo headers, including security tag, but the security team did not got a X-Debbugs-CC. Thanks for considering implementing the change, Regards, Salvatore