Bug#761658: Please do not default to using Google nameservers

[Marco d'Itri]

On Apr 07, martin f krafft <madduck at debian.org> wrote:

> admin's help is not acceptable. We may work hard to configure our
> services to provide sensible defaults, but the tendency is still not
> to turn them on by default.
I am not really sure of what this means.

> Our MTAs don't have default mail relays.
At least because there is no such service available.

> We don't enable AVAHI nor do we install cups-browsed to make things
> work out of the box.
Don't we? Then we probably should do it on desktop systems, since 
autoconfiguration greatly improves the user experience.

> We change upstream software to ensure as much
> as possible that we don't leak data. We file bug reports against
DNS queries intrinsecally leak data.

Also, your arguments about Debian having no defaults look a bit empty 
when looking at your original bug report in which you suggest OpenNIC as 
an acceptable default.

> So no, no concrete threat model. But I hope I was able to argue that
Cool, everything is still OK then.

-- 
ciao,
Marco
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 648 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20150407/c76c9d37/attachment-0002.sig>