E-Mail Notify when new Firmware is available

[munroe]

For what it's worth, 24.7.6 also did not deliver email via the forum. I'd love to see the mailing list brought back.

[dseven]

Also FWIW, I *did* get an email from the forum notifying me of the 24.7.6 release post. I suspect it's getting caught in SPAM filters sometimes, maybe. I do notice this:

Code: [Select]

Received-SPF: fail (google.com: domain of no-reply@opnsense.org does not designate 209.85.220.69 as permitted sender) client-ip=209.85.220.69;
although it does pass DKIM and DMARC. SPAM filters can be fickle, though....

[franco]

> I really think security updates should be taken much more seriously. OPNsense needs a way to mass notify about security updates.

Is that a straw man suggesting we don't take security updates seriously?

It's pretty easy to mass-notify all the GDPR compliant contacts we were provided which is... zero. The times of unsolicited mass-notifications are effectively over. It also allows the users to build their favourite channel from the available primary sources.


Cheers,
Franco

[munroe]

I mean, that's not what a straw man is? It is an implication though, and I think a fair one. It's a large project that people are trusting at their edge. It is good practice to have a mechanism to notify people of important security updates. I don't think this is controversial. And here we are met with "just subscribe to the announcement forum" which simply does not work predictably. I have provided multiple examples of email notifications failing to work on the forum -- and I have offered to help track them down. Yes, I and many others are capable of building my own tools to check for updates but the right thing to do is for the project to offer this, or at least have an official mailing list that works reliably. As I already posted before what are you going to do when there's a 0day? Hope people notice it on reddit? Hope they refresh their dashboard every day? You need a way to reach out in an official capacity besides posting on the forums. I'm not sure how GDPR is relevant here, it can still be opt-in.

Anyway regarding the announcement forum and email, I think the issue with forum subscription is that there is a backoff on topic notifications. If you do not actually click through and re-open the forum it will not send new email notifications for new topics past the one it already sent. So it may actually be that instead of spam filters. It would be better if the announcement forum didn't have this behavior probably.

[franco]

> It is an implication though, and I think a fair one.

Fair enough and I do disagree. Ive seen too many people claiming that this or that is suboptimal but in the average case users just fail to read or find what information is readily available.


Cheers,
Franco

[cookiemonster]

Do we have RSS feeds ?

[Monviech (Cedrik)]

Read the whole thread I responded that on page 1.
https://forum.opnsense.org/index.php?topic=40727.msg213549#msg213549

[cookiemonster]

Read the whole thread I responded that on page 1.
https://forum.opnsense.org/index.php?topic=40727.msg213549#msg213549

Alright then, sorry for asking.

[Monviech (Cedrik)]

Sorry I didnt want to sound mean. 

[cookiemonster]

No worries.