On Apr 07, martin f krafft <[email protected]> wrote: > admin's help is not acceptable. We may work hard to configure our > services to provide sensible defaults, but the tendency is still not > to turn them on by default. I am not really sure of what this means.
> Our MTAs don't have default mail relays. At least because there is no such service available. > We don't enable AVAHI nor do we install cups-browsed to make things > work out of the box. Don't we? Then we probably should do it on desktop systems, since autoconfiguration greatly improves the user experience. > We change upstream software to ensure as much > as possible that we don't leak data. We file bug reports against DNS queries intrinsecally leak data. Also, your arguments about Debian having no defaults look a bit empty when looking at your original bug report in which you suggest OpenNIC as an acceptable default. > So no, no concrete threat model. But I hope I was able to argue that Cool, everything is still OK then. -- ciao, Marco
pgp5ULVFhrXG2.pgp
Description: PGP signature
