Draft. Comments welcome. Please Cc the list, not me. ============================================================================ Those who have in Debian the power to do so, will implement the following:
To avoid spammers harvesting addresses from the list archives: - The public web archives of the different debian mailing lists, past, present and future, will be processed so that it becomes impossible for an ordinary user not having special privileges to mail someone who posted something to any debian list. The natural way of obtaining this privilege will be to subscribe to those lists and receive messages from subscribers, but the debian project may implement other alternative methods to gain this privilege. We will encourage other debian list archives to mirror us, and forbid debian archives which do not hide addresses. To avoid spammers harvesting addresses from maintainers from incoming.debian.org: - The Debian source package format will be modified so that .dsc and .changes files do not need to have the complete email of the maintainer, only his name and gpg signature. To avoid spammers harvesting addresses from maintainers in general: - The public web pages and ftp archives will be modified so that it becomes impossible for someone without special privileges to know the actual email address of the individual package maintainers. It should still be possible to mail someone at "[EMAIL PROTECTED]", but no such addresses will be present on web pages. The natural way of obtaining this privilege will be to have a Debian system in one's machine and simply looking at the available file in /var/lib/dpkg or looking at the different changelogs, but but the debian project may implement other alternative methods to gain this privilege. To avoid list posts to disseminate more than required: - There will be no mail to news gateway having email addresses in clear. Any such existing gateway will be forbidden by list policy, which subscribers should accept if they subscribe. If this is not doable, everything will be unsubscribed and everybody should write "yes, I accept" before subscribing again. To avoid spam in debian lists: - Being able to post is a privilege, not a right. The natural way of obtaining this privilege, for so called "open" lists, is by subscribing to them and using the same address in the From: field, or by using an email addresses which has been previously subscribed to a special white list. No other mail will reach the lists until it's approved by a moderator If there are no moderators for a given list, these mails will go to /dev/null (so to speak).
