On Mon, Feb 22, 2010 at 12:58 PM, Matthew Toseland <toad at amphibian.dyndns.org> wrote: > On Saturday 20 February 2010 21:33:17 Christian Funder Sommerlund wrote: >> sbc @ #freenet noted this. This seems to be an upgrade mistake? Surely >> we should allow everyone to view the bug tracker, and not only people >> logged in? > > No. Bugs often contain things like email addresses which while not strictly > confidential can be of use to spammers. I agree we should always make them > private but sometimes we mess up and the damage is much less if we require > registration just to access the tracker.
That's not obviously the right answer to me. Making more info easily available to our users will get both more users and more contributors. How that weighs in against the occasional email address leak, I'm not sure. It seems the ideal solution would be to automatically filter email addresses for non-registered users. Evan Daniel
