Comment 11 for bug 61909

Revision history for this message
Christian Reis (kiko) wrote : Re: Security contact unsubscription should be simpler

What change are you referring to, Kees? This hasn't changed anytime recent, really.

The bug you are referring to never had the security team subscribed to it. I think what we want is that we subscribe the security team automatically to the bug when it is marked security sensitive (no matter where in the bug's lifecycle). That would solve the subscription problem and mitigate the latter issue you point out, about there not being a security flag to set when filing a bug.

The latter issue is indeed a problem because people don't file bugs as security right off the bat any longer. However, when I last spoke to Martin he said he wasn't sure that wasn't a feature, since the number of bugs that were misreported in the past was huge. We can revisit that, though, if you both think that's the right thing to do.