-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Wayne Schlitt wrote:
However, the thing that bothers me is that we talk about not
disclosing "this issue", but instead we anonymize the personal/company
information and go ahead and discuss the issue.
We should either do what we say, or say what we do.
Personally, I'm leaning toward being much more explict about what
parts of the message will be kept confidential and making it clear
that the topic will be seen/reviewed by many people.
I agree with Terry that we should "say what we do".
However I don't think there is a meaningful difference between "keeping the
issue confidential" and "not discuss the issue publicly without anonymi-
zing it". I can always post to spf-discuss and say with a clear
conscience: "I once heard of a guy who <insert issue here>", even if I
promised to keep the issue confidential. After all nobody except me can
tell for sure about which real case I'm talking (let alone identify the
persons/organization involved).
Anyway, how would...
| Confidential! Please do not discuss this issue publicly without
| anonymizing sensitive information!
...translate to a concise labeling of the confidentiality selector on the
contact form?
"This issue [ may / may not ] be discussed publicly by project staff with
identifying information (e-mail addresses, domains, etc.) included" ?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFEmvUAwL7PKlBZWjsRArZSAJ94ONZZXIhYSvPbwdjJq3z54HMb4gCg5mLK
fogPXI8vGkkhY8Vjcs8rAhs=
=CzJC
-----END PGP SIGNATURE-----
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com