# security email address broken?

- Thread: https://externals.io/message/122054
- Original archive: https://news-web.php.net/php.internals/122054
- Started by Robert Landers on 2023-12-28T18:36:22+00:00
- Messages: 5
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #122054 — Robert Landers — 2023-12-28T18:36:22+00:00

URL: https://externals.io/message/122054#122054

Hello internals,

I sent an email to security@php.net (which I got from this page:
https://wiki.php.net/security#:~:text=Please%20report%20it,security/advisories/new)
and got back:

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

And then proceeded to list (possibly) every email address in the list.

I suspect this isn't supposed to happen?

Robert Landers
Software Engineer
Utrecht NL

---

## #122055 — Niels Dossche — 2023-12-28T18:46:25+00:00

URL: https://externals.io/message/122054#122055 · In reply to: #122054

Hi


> Hello internals,
> 
> I sent an email to security@php.net (which I got from this page:
> https://wiki.php.net/security#:~:text=Please%20report%20it,security/advisories/new)
> and got back:
> 
> I'm sorry to have to inform you that your message could not
> be delivered to one or more recipients. It's attached below.
> 
> For further assistance, please send mail to postmaster.
> 
> And then proceeded to list (possibly) every email address in the list.
> 
> I suspect this isn't supposed to happen?

No, this isn't supposed to happen.

In the meantime you can report issues via https://github.com/php/php-src/security/advisories

> 
> Robert Landers
> Software Engineer
> Utrecht NL
> 

Kind regards
Niels

---

## #122056 — Sebastian Bergmann — 2023-12-28T18:53:58+00:00

URL: https://externals.io/message/122054#122056 · In reply to: #122054

Am 28.12.2023 um 19:36 schrieb Robert Landers:
> I sent an email to security@php.net

I just sent an email to security@php.net and it did not bounce. Of course, 
that does not mean that it was received.

---

## #122057 — Robert Landers — 2023-12-28T19:15:13+00:00

URL: https://externals.io/message/122054#122057 · In reply to: #122055

>
> Hi
>
> 
> > […]
>
> No, this isn't supposed to happen.
>
> In the meantime you can report issues via https://github.com/php/php-src/security/advisories
>
> > […]
>
> Kind regards
> Niels
>
> --
> 
> To unsubscribe, visit: https://www.php.net/unsub.php
>

Thanks Niels, I've reported it on GitHub.

Robert Landers
Software Engineer
Utrecht NL

---

## #122058 — Derick Rethans — 2023-12-28T23:41:02+00:00

URL: https://externals.io/message/122054#122058 · In reply to: #122054

>Hello internals,
>
>I sent an email to security@php.net (which I got from this page:
>https://wiki.php.net/security#:~:text=Please%20report%20it,security/advisories/new)
>and got back:
>
>I'm sorry to have to inform you that your message could not
>be delivered to one or more recipients. It's attached below.

It definitely arrived (as did Sebastian's). Can you tell me which ones the warning was for?

cheers
Derick