[Reportbug-maint] Bug#642554: reportbug: --configure question about TLS misleading, please rephrase

Jakob Bohm jb-debbugs at wisemo.com
Fri Sep 23 18:27:28 UTC 2011


Package: reportbug
Version: 4.12.6
Severity: minor

When running "reportbug --configure" one of the questions asked
is:

   Does your SMTP host require TLS authentication?

This phrasing is confusing, as it seems to ask if the SMTP host
requires TLS authentication of the user (via client certificates
or SRP), which a few SMTP hosts might do.  I believe a much
better phrasing would be:

   Use TLS to encrypt the SMTP host login?

The proposed phrasing more accurately reflect that TLS is used
for encrypting the SMTP connection (and maybe for authenticating
the server), but not for any authentication required by the
server.  The phrasing mentions "login" to avoid misleading users
into thinking Debian bug reports are somehow secret or private,
when in fact the Social Contract requires them to be published.
Thus the only thing really protected by the encryption is the
password login to the SMTP host.

-- Package-specific info:
** Environment settings:
INTERFACE="text"

** /home/WISEMO/jb/.reportbugrc (censored):
reportbug_version "4.12.6"
mode advanced
ui text
realname "Jakob Bohm"
email "jb-debbugs at wisemo.com"
smtphost "******"
smtpuser "******"
smtptls

-- System Information:
Debian Release: 6.0.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.39-bpo.2-amd64 (SMP w/1 CPU core)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages reportbug depends on:
ii  apt                    0.8.10.3+squeeze1 Advanced front-end for dpkg
ii  python                 2.6.6-3+squeeze6  interactive high-level object-orie
ii  python-reportbug       4.12.6            Python modules for interacting wit

reportbug recommends no packages.

Versions of packages reportbug suggests:
pn  debconf-utils                <none>      (no description available)
ii  debsums                      2.0.48+nmu3 tool for verification of installed
pn  dlocate                      <none>      (no description available)
pn  emacs22-bin-common | emacs23 <none>      (no description available)
ii  file                         5.04-5      Determines file type using "magic"
ii  gnupg                        1.4.10-4    GNU privacy guard - a free PGP rep
pn  python-gtk2                  <none>      (no description available)
pn  python-gtkspell              <none>      (no description available)
pn  python-urwid                 <none>      (no description available)
pn  python-vte                   <none>      (no description available)
ii  ssmtp [mail-transport-agent] 2.64-4      extremely simple MTA to get mail o
pn  xdg-utils                    <none>      (no description available)

-- no debconf information





More information about the Reportbug-maint mailing list