On 2024/10/10 16:04:22 Mark Thomas wrote:
> On 10/10/2024 09:21, Gary Gregory wrote:
> > If I can't get to Gmail, there's probably a lot more wrong with my
> > connectivity than just that ;-)
>
> The greater risk is the ASF email is unavailable. Think threat actors
> performing a DDoS on ASF infra while we are trying to co-ordinate fixing
> the vulnerability.
Or compromised, such that email itself is available but exposed to attackers
(or controlled by attackers and considered untrustworthy).
"Try ponymail" doesnt solve for that threat - even if you can send from
ponymail and read at ponymail, it immediately exposes all of the coordination
to the attacker?
---------------------------------------------------------------------
To unsubscribe, e-mail: security-discuss-unsubscr...@community.apache.org
For additional commands, e-mail: security-discuss-h...@community.apache.org
