mirror of
https://github.com/QubesOS/qubes-doc.git
synced 2024-12-24 23:09:29 -05:00
Add section on mailing list safety
Thank you to Taiidan for prompting the addition of this section.
This commit is contained in:
parent
5c24a146ff
commit
7862b4c10c
@ -14,6 +14,42 @@ redirect_from:
|
||||
Qubes Mailing Lists
|
||||
===================
|
||||
|
||||
Staying Safe
|
||||
------------
|
||||
|
||||
The Qubes mailing lists are open to the public. The contents of the list are
|
||||
crawled by search engines and archived by third-party services outside of our
|
||||
control. Please do not send anything to the mailing lists that you are not
|
||||
comfortable seeing discussed in public. If confidentiality is a concern, please
|
||||
use PGP encryption in an off-list email.
|
||||
|
||||
The Qubes community includes people from all walks of life and from around the
|
||||
world. Individuals differ in areas of experience and technical expertise. You
|
||||
will come into contact with others whose views and agendas differ from your own.
|
||||
Everyone is free to write what they please, as long as it doesn't violate our
|
||||
[Code of Conduct][coc]. Be friendly and open, but do not believe everything you
|
||||
read. Use good judgment, and be especially careful when following instructions
|
||||
(e.g., copying commands) given by others on the lists.
|
||||
|
||||
All official announcements from the [Qubes team] will be signed by the PGP key
|
||||
belonging to the team member who sends the announcement. However, anyone on the
|
||||
list can choose to sign their messages, so the presence of a PGP signature does
|
||||
not indicate authority. How, then, should you sort the good advice from the bad?
|
||||
This is up to each individual to decide, but it helps to know that many members
|
||||
of our community have proven themselves knowledgeable through their
|
||||
[contributions] to the project. Typically, these individuals sign their messages
|
||||
with the same key as (or another key authenticated by) the one they use to
|
||||
[sign their contributions][code-signing].
|
||||
|
||||
For example, you might find it easier to trust advice from someone who has a
|
||||
proven track record of [contributing software packages] or [contributing to the
|
||||
documentation]. It's unlikely that individuals who have worked hard to build
|
||||
good reputations for themselves through their contributions over the years would
|
||||
risk giving malicious advice in signed messages to public mailing lists. Since
|
||||
every contribution to the Qubes OS Project is publicly visible and
|
||||
cryptographically signed, anyone would be in a position to [verify] that these
|
||||
came from the same keyholder.
|
||||
|
||||
Discussion list guidelines
|
||||
--------------------------
|
||||
|
||||
@ -75,7 +111,8 @@ guidelines.
|
||||
including many who post to the lists anonymously. (Given the integration of
|
||||
Qubes with [Whonix], we understand better than most the complexities of
|
||||
privacy and anonymity, and we know that many users have no other choice but
|
||||
to post anonymously.) You can read our project's [Code of Conduct][coc] for more information.
|
||||
to post anonymously.) You can read our project's [Code of Conduct][coc] for
|
||||
more information.
|
||||
|
||||
### Specific rules and notes ###
|
||||
|
||||
@ -362,6 +399,12 @@ You must be subscribed in order to post to this list.
|
||||
messages which were sent prior to your subscription to the list. However, a
|
||||
Google account is required in order to post through this interface.
|
||||
|
||||
[Qubes team]: /team/
|
||||
[contributions]: /doc/contributing/
|
||||
[code-signing]: /doc/code-signing/
|
||||
[contributing software packages]: /doc/package-contributions/
|
||||
[contributing to the documentation]: /doc/doc-guidelines/
|
||||
[verify]: /security/verifying-signatures/
|
||||
[qsb]: /security/bulletins/
|
||||
[qubes-announce-web]: https://groups.google.com/group/qubes-announce
|
||||
[top-post]: https://en.wikipedia.org/wiki/Posting_style
|
||||
@ -387,3 +430,4 @@ You must be subscribed in order to post to this list.
|
||||
[localization]: https://github.com/QubesOS/qubes-issues/issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aopen%20label%3Alocalization
|
||||
[coc]: /code-of-conduct/
|
||||
[Transifex]: https://www.transifex.com/otf/qubes/
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user