[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: the ``DSA'' numbers in security listings



On Sun, Jan 14, 2001 at 06:34:12PM +0100, Josip Rodin wrote:
> Why is it necessary to have those ugly DSA-?? strings in the indices for
> security web pages? IMO they only clutter the list, and for no purpose. Why
> would a random user/admin need to care about that number before the package
> name? They apt-get package names, not sequences of numbers :)

The dsa- provides a single, unique way to reference a given security
alert. If there are multiple security alerts for a given package, it is
easier for someone to check one in particular by looking for the dsa
number. If you don't care to see the number, just move your eye a little
further down the line. IOW, there are some people who *do* want to see
this info, and it's easier for you to skip over what you don't want than
for them to use the force to get the info if it ain't printed there.

> Besides, it's listed on the page containing the details, and in the e-mails,
> anyway... I don't think Kurt Seifried has any reason to be unhappy with that :p

I don't care about kurt seifried one way or another. The requests for a
standard numbering convention did not come from him alone, and the
decision to introduce such a scheme was made by the security team, not
by any outside party.

-- 
Mike Stone



Reply to: