In <200606221952(_dot_)32069(_dot_)julian(_at_)mehnle(_dot_)net> Julian Mehnle
<julian(_at_)mehnle(_dot_)net> writes:
Wayne Schlitt wrote:
However, the thing that bothers me is that we talk about not
disclosing "this issue", but instead we anonymize the personal/company
information and go ahead and discuss the issue.
We should either do what we say, or say what we do.
Personally, I'm leaning toward being much more explict about what
parts of the message will be kept confidential and making it clear
that the topic will be seen/reviewed by many people.
I agree with Terry that we should "say what we do".
However I don't think there is a meaningful difference between "keeping the
issue confidential" and "not discuss the issue publicly without anonymi-
zing it". I can always post to spf-discuss and say with a clear
conscience: "I once heard of a guy who <insert issue here>", even if I
promised to keep the issue confidential. After all nobody except me can
tell for sure about which real case I'm talking (let alone identify the
persons/organization involved).
I think it can be very hard to determine what parts of an email need
to be kept confidential. Contrived example: imagine someone who
publicly stated they knew the answer, was certain, and did not need to
"go back and RTFRFC". Then they decide to *quietly* submit a query to
use in hopes of not losing face. Even minor details, spelling errors
or the situation could cause them to lose face.
Anyway, how would...
| Confidential! Please do not discuss this issue publicly without
| anonymizing sensitive information!
...translate to a concise labeling of the confidentiality selector on the
contact form?
"This issue [ may / may not ] be discussed publicly by project staff with
identifying information (e-mail addresses, domains, etc.) included" ?
Yes, I think something like that would be better. It still reads a
little bit awkwardly to me, but I can't immediately come up with
anything better. :-<
-wayne
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com