-------- Forwarded Message -------- Return-Path: <[email protected]> Delivered-To: [email protected]Received: from spool.mail.gandi.net (mspool2-d.mgt.gandi.net [10.0.21.133]) by nmboxes47-d.mgt.gandi.net (Postfix) with ESMTP id EE45B40D3C for <[email protected]>; Sat, 26 Sep 2015 15:20:26 +0200 (CEST) Received: from mfilter37-d.gandi.net (mfilter37-d.gandi.net [217.70.178.168]) by spool.mail.gandi.net (Postfix) with ESMTP id EBB26178038 for <[email protected]>; Sat, 26 Sep 2015 15:20:26 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at mfilter37-d.gandi.netReceived: from spool.mail.gandi.net ([IPv6:::ffff:10.0.21.133]) by mfilter37-d.gandi.net (mfilter37-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id nEljMQ2oytF4 for <[email protected]>; Sat, 26 Sep 2015 15:20:25 +0200 (CEST) Received: from lists.gnu.org (lists.gnu.org [IPv6:2001:4830:134:3::11]) by spool.mail.gandi.net (Postfix) with ESMTPS id 607E0178093 for <[email protected]>; Sat, 26 Sep 2015 15:20:22 +0200 (CEST) Received: from localhost ([::1]:53804 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from <[email protected]>) id 1ZfpOn-0007kN-9C for [email protected]; Sat, 26 Sep 2015 09:20:21 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:44858) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from <[email protected]>) id 1ZfpOj-0007kB-Ow for [email protected]; Sat, 26 Sep 2015 09:20:18 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from <[email protected]>) id 1ZfpOe-0001Ni-T0 for [email protected]; Sat, 26 Sep 2015 09:20:17 -0400 Received: from mx21lb.world4you.com ([81.19.149.131]:44146) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <[email protected]>) id 1ZfpOe-0001NT-JK for [email protected]; Sat, 26 Sep 2015 09:20:12 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=arvanitis.at; s=dkim11; h=Mime-Version:Content-Type:References:In-Reply-To:Date:To:From:Subject:Message-ID; bh=soVv7flbcbzcClF9iI3mXIJg4oiHEocjD1HuRcdUvNo=; b=jCeJx97pyXYRmwLvEERe4MJl7JzVfwItWsgXg4vyivO3UxUXwhuFNgikVd2/jTSe3E5YnhMImYCPX4unI8ojktRbid16A8tRshg4Kx2VDWzPbulcqVSBrZrWd8AzIcX19sMLzZAszvGxqL27T+AaT3WSjmVLSKhaBvlKSJ1R6No=; Received: from [77.119.130.54] (helo=arvanitis) by mx21lb.world4you.com with esmtpsa (UNKNOWN:AES128-GCM-SHA256:128) (Exim 4.77) (envelope-from <[email protected]>) id 1ZfpOc-0006Ww-II for [email protected]; Sat, 26 Sep 2015 15:20:10 +0200
Message-ID: <[email protected]> From: Dimitris Arvanitis <[email protected]> To: [email protected] Date: Sat, 26 Sep 2015 15:19:59 +0200 In-Reply-To: <[email protected]>References: <1436846949.21008.3.camel@thinkpad> <[email protected]> <[email protected]>
X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 X-SA-Do-Not-Run: Yes X-AV-Do-Run: Yes X-SA-Exim-Connect-IP: 77.119.130.54 X-SA-Exim-Mail-From: [email protected]X-SA-Exim-Scanned: No (on mx21lb.world4you.com); SAEximRunCond expanded to false
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 81.19.149.131 Subject: Re: [Bug-gnuzilla] Unpatched security flaws in IceCat X-BeenThere: [email protected] X-Mailman-Version: 2.1.14 Precedence: list List-Id: "GNUzilla discussion and bug reports." <bug-gnuzilla.gnu.org>List-Unsubscribe: <https://lists.gnu.org/mailman/options/bug-gnuzilla>, <mailto:[email protected]?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/bug-gnuzilla> List-Post: <mailto:[email protected]> List-Help: <mailto:[email protected]?subject=help>List-Subscribe: <https://lists.gnu.org/mailman/listinfo/bug-gnuzilla>, <mailto:[email protected]?subject=subscribe> Content-Type: multipart/mixed; boundary="===============0288240843757593734=="
Errors-To: [email protected] Sender: [email protected] Hallo! First of all, let me state this e-mail is not intended to apportion blame on anyone. With Firefox ESR version 38.3 being released some days ago and IceCat still basing on version 31.8 with only some patches backported, I think there is urgent need for a statement clarifying the intention of IceCat. On the website it is said that IceCat's main advantage is an ethical one, in such that it is free. Written below this, some privacy enhancing features are listed. This is misleading and dangerous. One could think that using IceCat will enhance your privacy. Having a version with well documented security bugs for months now definitely is clearly proving the opposite. So as first step it is necessary to make a clarifying statement on the website that using IceCat exposes you to significant risk and it should not be used on productive systems. Then it should be decided how IceCat can go on in future, which is its purpose and how it can be achieved. But for the time, in my opinion, the stated goal of IceCat is not in line with reality. Best regards, Dimitris
signature.asc
Description: PGP signature
-- http://gnuzilla.gnu.org
