Generally, I think it's a good idea.
We put our email address in the notes field for our gateways. So anyone
with access to the portal will know how to contact us. I think it's
important that we be able to reach any gateway operator. We've seen
numerous cases over the last month or so in which that ability has shown to
be valuable. So maybe the email address should be a required field?
But you're right to be cautious. I don't worry so much about another ham
seeing my address. I *DO* worry about persistent attackers who might find a
weak password on the portal, log in, and then spider the site. All it takes
is one weak password. mailto: links would be obvious targets. Plain text
in the notes field is less obvious. Plain-plain text (user at domain dot
com) even more so. But you'll never eliminate all risks.
So, if we go this way, just announce well in advance that this is what
you're going to do. That will give everyone time to re-asses which email
address they list in the portal.
Also, if you could allow for more than one address, that would be ideal.
Otherwise, those of us that have more than one sysop will need to create an
alias somewhere and that's one more thing that needs updating.
Michael
N6MEF
-----Original Message-----
From: 44net-bounces+n6mef=mefox.org(a)hamradio.ucsd.edu
[mailto:44net-bounces+n6mef=mefox.org@hamradio.ucsd.edu] On Behalf Of Chris
Sent: Monday, February 24, 2014 1:30 AM
To: AMPRNet working group
Subject: Re: [44net] Suggestion?
(Please trim inclusions from previous messages)
_______________________________________________
The WHOIS is for IP allocations not gateways.
I *could* add a link to an email address, or other contact information, but
I'm not going to just do that without a consensus of opinion as some folk
may object to their contact details being made available in this fashion.
Thoughts?
Chris
On 23 Feb 2014, at 16:49, kb9mwr(a)gmail.com wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Thanks Chris.
Now if there is a problem originating from one of the gateways we know
who to get a hold of.
It may also be desirable if their callsign had a link to method of
contact (email) that is on file for them. But I heard a whois
function is in the works, and I assume that will have something like
that.
Steve
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net