fwiw, i agree with jmm that encouraging users to upgrade to stable is
the best outcome here.  The question is, what are we doing to the folks
who (for whatever reason) can't make that switch.

On Thu 2018-12-20 17:01:30 +0100, Moritz Mühlenhoff wrote:
> If suddenly all kinds of core libraries are getting updated in jessie
> (with minimal testing)

we're not talking about "all kinds of core libraries" -- we're talking
about a very selected subset.  And i don't think we're talking about
"minimal testing", there has been a reasonable amount of testing.  I
think we ought to consider this specific case, rather than trying to
make a systematized rule.

> EOLing enigmail seems the only sensible option by far.

the main issue with EOLing enigmail is that users will (instead of
upgrading to stable) typically just use the version from
addons.mozilla.org, which has both non-DFSG-free issues and
significantly scary behavior (downloading and silently executing
binaries from the web on the user's behalf).

If we're EOLing thunderbird on jessie entirely, that'd be one thing (and
i'd be ok with it).  But EOLing enigmail on its own sounds like a route
to trouble for enigmail users on jessie.

         --dkg

Attachment: signature.asc
Description: PGP signature

Reply via email to