I read through my friends e-mail again and it appears he accessed the report only 16 seconds after you switched it to public. Sorry for any confusion on that point.
I don't doubt that thousands of people have received plain text email on private security issues under the current system with no harm done. The question remains however whether it is the correct policy? Clearly in most cases it's no big deal, but someday there may well be a case where it is and that is why I filed the bug report. Thanks again for your help! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1352625 Title: Launchpad private security bug report trasmitted in open e-mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+bug/1352625/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
