[pydotorg-www] Making list membership public

[Georg Brandl]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 25.09.2010 15:34, schrieb anatoly techtonik:
> On Sat, Sep 25, 2010 at 9:13 AM, Georg Brandl <georg at python.org> wrote:
>> Am 25.09.2010 00:40, schrieb Josh Kupershmidt:
>>> On Fri, Sep 24, 2010 at 1:00 PM, A.M. Kuchling <amk at amk.ca> wrote:
>>>> On python-dev, it was noted that this list...
>>>>> http://mail.python.org/mailman/listinfo/pydotorg-www
>>>>> ... has hidden its membership (even to members). Does it really need
>>>>> to appear that secretive? At least the message archive is open and has
>>>>> all the usual suspects.
>>>>
>>>> Any objections to making the subscriber list public?  It seems
>>>> harmless, especially since the archives are public anyway.
>>>
>>> Hope I'm not misunderstanding something, but if you're proposing to
>>> publicly make available the names/emails of everyone on this list, I
>>> really don't see the utility. Why would anyone, other than a spammer,
>>> need this information to be posted in this way? Yes, I know that many
>>> folks' addresses are going to be in the archives anyway. But why make
>>> life easier for spammers, and much worse for lurkers, whose addresses
>>> might not be so public?
>>
>> Isn't it possible to make the addresses visible to members in addition
>> to admins, but not the general public?
>>
>> Re. use case, someone complained we were secretive and not open enough.
> 
> It was me, and I will say that opening names won't help to get a better image.
> Opening pydotorg and moving all the secret stuff completely out of sight will.

There is no secret stuff going on on pydotorg.  It is simply administrivia for
the several python.org machines, which can include sensitive information at
times and is therefore private as a precaution.

If you don't believe us even that, you'd probably also want to make the root
credentials for python.org public, so that the community can check the secret
software we're running on the diverse machines?

Georg

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)

iEYEARECAAYFAkyd/DAACgkQN9GcIYhpnLAbRQCfdR7OrHHf/KqBBZ342mFc+LLJ
BrIAnjtuEx1crlrrdGGpnCiP0y6dl8No
=v6li
-----END PGP SIGNATURE-----