GitLab

Tor-security gets huge amounts of spam, making it nigh unusable. Further, most of the people who send email there don't use the gpg key, thus rendering its encryption feature mostly pointless.

I'm proposing this solution:

• Add a tor-security-encrypted@ list/alias. Give it the same key as tor-security@ used to have. Make it reject unencrypted email.
• Update the documentation on the wiki to tell people to send tor-security mail to tor-security@, and if they think it's very sensitive to gpg encrypt it and send it to tor-security-encrypted@.
• Remove schleuder from tor-security@.

I've talked about this with the other tor-security@ subscribers (arma and sysrqb) and they seem okay with it.