On Fri, Jan 23, 2015 at 5:32 PM, Yvan Boily <ybo...@mozilla.com> wrote:

>
>
> On Fri, Jan 23, 2015 at 5:16 PM, Benjamin Kerensa <bkere...@mozillausa.org
> > wrote:
>
>>
>>
>> On Fri, Jan 23, 2015 at 5:08 PM, Gavin Sharp <ga...@gavinsharp.com>
>> wrote:
>>
>>> I should perhaps clarify, though, that I don't really think there's a
>>> need for a project-wide policy to enforce that channels must be
>>> logged, and that's probably what Yvan is reacting strongly to. Most of
>>> the important public IRC channels are already being publicly logged,
>>> as mentioned, and where they aren't it's easy enough to reach out to
>>> the channel owner and change that.
>>>
>>
>> Right and my proposal is to have global policy including which channels
>> must be exempt due to sensitive discussions (I can think of a handful
>> myself) and then create a process for starting logging and opting out of
>> channel logging by a channel owner.
>>
>
> Requiring channel owners to opt out of public logging to a Mozilla
> resources on behalf of their users (imo) is not consistent with the
> published data privacy principles
> <https://blog.mozilla.org/privacy/2014/11/11/mozillas-data-privacy-principles-revisited/>.
> Not the least of which is the No Suprises - many users would be surprised
> to learn that after years of telling users "we don't log irc", we start
> logging it and publishing it.
>
> I understand that users cannot control data that may be collected and
> republished by individuals, but this discussion isn't about what *others*
> are doing with data, it's about what Mozilla is doing with data.
>

That blog post was written within the scope of our products and end users
not our project, tools or contributors.


>
>
>> But having them hosted at something like irclogs.mozilla.org and
>> searchable versus glob hosting them all makes more sense imho.
>>
>> At the end of the day thought I imagine unless someone disabled the
>> default logging on the ircd that Mozilla technically already globally logs
>> all user communications even though in private message. Whether they
>> disabled it or not I am unsure and how long those logs are retained I am
>> unsure and who has access I am unsure.
>>
>> Default Inspircd config has all user input/output logged by default:
>>
>> https://gitorious.org/inspircd/inspircd/source/911e33e3995509afa4cf3ea8fae0ddca2dad78dc:conf/inspircd.conf.example#L706
>>
>>
> It is my understanding that we retain only enough logs to satisfy
> operational needs, although I can inquire with operations team if you would
> like.
>
_______________________________________________
governance mailing list
governance@lists.mozilla.org
https://lists.mozilla.org/listinfo/governance

Reply via email to