Group Name Guessing Disclosure Policy
Gervase Markham
gerv at mozilla.org
Wed Jul 21 00:17:50 UTC 2010
On 20/07/10 13:44, Max Kanat-Alexander wrote:
> So, instead of creating a performance-draining and extremely complex
> centralized method for determining all of the above, I figured I'd just
> modify our policy on the subject.
I'm normally the last one to suggest this, but: could we have an admin
pref "Group names are secret"? Have it on, and you have to deal with
vague error messages and the possibility that a typo will accidentally
reveal a bug. Have it off, and, well, your group names aren't secret.
Gerv
_______________________________________________
dev-apps-bugzilla mailing list
dev-apps-bugzilla at lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-apps-bugzilla
More information about the developers
mailing list