I systematically get one or two no-clue-users answers asking us to unsubscribe them from the list they got the GLSA from. It may be useful to add a small blurb at the end of the GLSA TXT version with something like Unsubscribing ============= This GLSA is posted to several lists. If you got it from gentoo-announce and want to unsubscribe from it, please read: XXXXXXXXXXXXXX If you got it from another list, please contact them for unsubscription information.
Reassigning
mmf...I'd rather handle this at the ML level instead of the GLSA level. I was already planning on including a footer at the bottom of every major ML message saying something like, "you are subscribed to <list>@gentoo.org. To unsubscribe, please send a message to <list>+unsubscribe@gentoo.org>". These would obviously only go out to folks on gentoo-announce, which may or may not be desirable -- not sure if the lusers you're getting complaints from are on our lists or FD or bugtraq. Thoughts?
OK, so this approach may have one or two drawbacks...such as breaking signatures. :P
About 2/3 the lusers complaining apparently got their email from gentoo-announce (telling from the modified subject line)
Looks like (on gentoo-dev) the footer is not included on signed mails. So it doesn't break signatures, but it doesn't inform the end user either.
Here is the new proposed blurb : --------------------------------------------------------------------- Unsubscribing ============= You may have received this GLSA because you're subscribed to the gentoo-announce mailing-list. To unsubscribe from this list you should send an email to gentoo-announce-unsubscribe@gentoo.org. Please note that this message is crossposted to other mailing-lists. If you want to unsubscribe from these, please follow their specific unsubscription instructions. --------------------------------------------------------------------- I would add it between the "Concerns" and "License" blurbs.
Comments ? Or should I consider this approve and channel to plasmaroo ?
are the list info headers not enough? List-Post: <mailto:gentoo-announce@lists.gentoo.org> List-Help: <mailto:gentoo-announce-help@gentoo.org> List-Unsubscribe: <mailto:gentoo-announce-unsubscribe@gentoo.org> List-Subscribe: <mailto:gentoo-announce-subscribe@gentoo.org> List-Id: Gentoo Linux mail <gentoo-announce.gentoo.org> several email clients pick up on these headers and display commands such as: [ Note: This message contains **email list management information** ] where the ** text is a link to more info... having the info in the headers would also not mess with gpg signatures. bugtraq and other large lists (as well as all/most of ours) have these already. i would rather _not_ see text added to each email. inevitably the emails will get forwarded to other lists and that para will confuse users even more.
Obviously the no-clue users that ask that we "remove them from the list" don't use those advanced MUAs and do not read headers. I agree this can add more confusion and that we should not disturb the majority of normal users just to be kind to the stupid ones. Maybe we should just make up an info page on the security website that can explain very slowly to those users what they should do to not receive GLSAs anymore. And send the users to that page when they ask to be removed.
I'd say no footer and hardly feel this is worth a special info page.
I agree with jaervosz. There is a page describing the various lists and subscribing/unsubscribing somewhere already anyways I think, maybe that should be linked from security if it's not already. Ah, just checked out security.g.o, the "How to receive GLSAs" could be a little more detailed with info about the list. The page about mailing lists is linked in the horizontal navigation bar as "lists" on the main page: http://www.gentoo.org/main/en/lists.xml
I vote for no additional info being added to the glsa's
wontfix then