On Mon, 09 Oct 2017 at 19:00:49 +0200, Ansgar Burchardt wrote: > For Debian developers, it is also possibly to upload via ssh (scp, sftp > or rsync+ssh) to > > > ssh://ssh.security.upload.debian.org/srv/security.upload.debian.org/SecurityUploadQueue > > but please be aware that uploads via dput[1]/dupload[2] remain readable > for a short time, so do not use it for embargoed issues (yet).
For embargoed issues, is it better to upload via ssh and have the upload briefly readable by other DDs, or to upload via ftp and have the upload briefly readable by everyone on the network path between the DD and security.upload.debian.org? smcv