From owner-freebsd-ports@freebsd.org Sat Feb 6 03:57:16 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7EA77A9D0F0 for ; Sat, 6 Feb 2016 03:57:16 +0000 (UTC) (envelope-from qjail1@a1poweruser.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 631A81B22 for ; Sat, 6 Feb 2016 03:57:16 +0000 (UTC) (envelope-from qjail1@a1poweruser.com) Received: by mailman.ysv.freebsd.org (Postfix) id 60993A9D0EF; Sat, 6 Feb 2016 03:57:16 +0000 (UTC) Delivered-To: ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 45486A9D0EE for ; Sat, 6 Feb 2016 03:57:16 +0000 (UTC) (envelope-from qjail1@a1poweruser.com) Received: from s119.web-hosting.com (s119.web-hosting.com [162.213.253.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 204801B21 for ; Sat, 6 Feb 2016 03:57:15 +0000 (UTC) (envelope-from qjail1@a1poweruser.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=a1poweruser.com; s=default; h=Content-Transfer-Encoding:Content-Type: Subject:To:MIME-Version:From:Date:Message-ID; bh=ln3rgjoU7kgumaK9HKEoz79ex9MqI4Oyh06gIaWfkYM=; b=mji2PnjoS8N8FzJmnNcJH9Mlb0 PpuZvbzRckpLxvhot+euZNcm94AObsKGgqhZTToYT2/bOqi34z7aYjfTh17GOVgQGF4hp3QMBU0lu L4TfAx5RkLZ7wsS9VEFDb7V+FYCXyAPcpLkfKANb6MQnBAcYyT+oc4rdfCun8KxD6Dx0=; Received: from [120.29.76.9] (port=1329 helo=[192.168.1.149]) by server119.web-hosting.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.86) (envelope-from ) id 1aRt3u-003VKW-KE for ports@freebsd.org; Fri, 05 Feb 2016 21:57:28 -0500 Message-ID: <56B56114.1000401@a1poweruser.com> Date: Sat, 06 Feb 2016 10:57:24 +0800 From: qjail1 User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: ports@freebsd.org Subject: port maintainer address Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server119.web-hosting.com X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - a1poweruser.com X-Get-Message-Sender-Via: server119.web-hosting.com: authenticated_id: qjail1@a1poweruser.com X-Authenticated-Sender: server119.web-hosting.com: qjail1@a1poweruser.com X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Feb 2016 03:57:16 -0000 A year ago I was receiving loads of spam email on the maintainer email addresses used in the ports makefile. I created bug tickets to change the user name part of the email address for all the ports I maintain, but some how I missed the qjail2 port. Now that port says its maintained by ports@FreeBSD.org and the spam email has stopped. Since bugzilla uses the port maintainer email address as the way to identify the port maintainer, I no longer can post updates to qjail2 port. This is a two sided coin. On one side [no more spam email] but on the other side [blocked from making port updates] to ports I am really the maintainer. Lest look at the big picture. The https://www.freebsd.org/cgi/ports.cgi?query=qjail2&stype=all website displays the maintainer email address for each and every port. A person doesn't have to be a genius to see that this is one of the places where email address are being harvested from. Why has Freebsd NOT done something to protect their port maintainers from spam. Bugzila is now the preferred way to report bugs in ports. There is no longer a need to publicly display the ports maintainer real email address on the ports website. The simple solution is to change the html code of the ports website to replace every where the maintainer's email address is displayed with ports@FreeBSD.org. That way the makefile info stays the same and bugzilla works the same. Your just changing what the public user and harvesters see. There are other places where this info can be obtained, such as //svnweb.freebsd.org/ports/. This is a very large doorway to all the ports maintainer email address. The big picture solution is to NOT carry the maintainer email address in the makefile at all. Have it entered into a secure maintainers database that only bugzilla has access to. You get the general picture here. I am sure there are people with a better understanding of the internal workings who can develop a better concept to prohibit the public from having access the ports maintainer real email address. Its time serious thought is given to this problem. Thanks for letting me stand on my soap box.