On Thu, 12 Nov 2020 at 18:13, Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> wrote:
On Thu, Nov 12, 2020 at 02:56:10PM -0800, Kevin Fenzi wrote:
> I'm not sure I like this from a security point of view... is there any
> way we could use the discourse api and pull a digest from a script and
> have it post to the list? (getting rid of the email in part)?
I mean, probably? That suddenly escalates it to "much bigger project that
I'm not sure is worth it".
As for security -- it's no worse than we have now, right? I mean, email
coming into lists is just secured by it claiming to be from a list member,
right?
(The email address the the bot user takes incoming messages at could be
something entirely different from the address subscribed to the mailing
list.)
I am not as much worried about the security around dealing with procmail filtering (which in my experience has had problems.) I am more worried about these emails having to go through the multiple layers of Red Hat filtering we have to send email in and out of Fedora. Then dealing with all the ways that these sorts of emails break various people's DMARC rules.
Then there is the fact that people are going to reply to the list and never see any replies, get told to post it in discourse, get into an argument that they shouldn't need to and why can't Fedora parse this stuff over. [I say this from the other tools where we start on a "this sounds like a good idea" and end up with a lot of make work to patch together two systems which are actively hostile to each other.] And finally, this is not going to be a one-off. This is going to be a lot of lists over time and those groups are going to want to go to various places and have similar levels of whatever we put into this.
The council wants to move any lists to discourse.. then they should move them to discourse and be done with it. Many of the people who don't want to head over aren't going to be happy with any partial solution. If people want to follow via email they can set up their own digests.
--
Matthew Miller
<mattdm@xxxxxxxxxxxxxxxxx>
Fedora Project Leader
_______________________________________________
infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
--
Stephen J Smoogen.
_______________________________________________ infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
