Group Name Guessing Disclosure Policy

Gervase Markham gerv at mozilla.org
Wed Jul 21 00:17:50 UTC 2010


On 20/07/10 13:44, Max Kanat-Alexander wrote:
> 	So, instead of creating a performance-draining and extremely complex
> centralized method for determining all of the above, I figured I'd just
> modify our policy on the subject.

I'm normally the last one to suggest this, but: could we have an admin 
pref "Group names are secret"? Have it on, and you have to deal with 
vague error messages and the possibility that a typo will accidentally 
reveal a bug. Have it off, and, well, your group names aren't secret.

Gerv

_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla



More information about the developers mailing list