freedomofpress
Publish journalist best practice guide
Since this is so critical to the anonymity of SecureDrop sources, we should provide more clear guidance on how journalists should be discussing and working with source materials (beyond just redacting metadata as described in freedomofpress/securedrop#1449). Some organizations may have their own internal processes worked out, but other organizations need more guidance than we are providing. It's fine if this is just linking out to other resources - if these resources exist, let's compile them in this ticket.
Questions that need answers to be written down:
- [ ] How should a team of journalists and editors communicate about source materials? (i.e. Signal groups, not Slack or email)
- [ ] What are the best practices for validating documents without leaking source identity? (there are existing resources for this, let's link to them)
- [ ] Questions in freedomofpress/securedrop#1449 can go in this guide
User Stories
As a journalist or editor, I want clear guidance on how I should responsibly work with SecureDrop documents to protect their identity.
In terms of metadata redecation, we do now have docs for MAT2 in the SecureDrop docs, and we do link to the FPF guide: https://freedom.press/training/everything-you-wanted-know-about-media-metadata-were-afraid-ask/
We'll likely add more best practices documentation in the context of the SecureDrop Workstation.
