On Thu, 12 Nov 2020 at 18:13, Matthew Miller <mattdm(a)fedoraproject.org>
wrote:
On Thu, Nov 12, 2020 at 02:56:10PM -0800, Kevin Fenzi wrote:
> I'm not sure I like this from a security point of view... is there any
> way we could use the discourse api and pull a digest from a script and
> have it post to the list? (getting rid of the email in part)?
I mean, probably? That suddenly escalates it to "much bigger project that
I'm not sure is worth it".
As for security -- it's no worse than we have now, right? I mean, email
coming into lists is just secured by it claiming to be from a list member,
right?
(The email address the the bot user takes incoming messages at could be
something entirely different from the address subscribed to the mailing
list.)
I am not as much worried about the security around dealing with procmail
filtering (which in my experience has had problems.) I am more worried
about these emails having to go through the multiple layers of Red Hat
filtering we have to send email in and out of Fedora. Then dealing with all
the ways that these sorts of emails break various people's DMARC rules.
Then there is the fact that people are going to reply to the list and never
see any replies, get told to post it in discourse, get into an argument
that they shouldn't need to and why can't Fedora parse this stuff over. [I
say this from the other tools where we start on a "this sounds like a good
idea" and end up with a lot of make work to patch together two systems
which are actively hostile to each other.] And finally, this is not going
to be a one-off. This is going to be a lot of lists over time and those
groups are going to want to go to various places and have similar levels of
whatever we put into this.
The council wants to move any lists to discourse.. then they should move
them to discourse and be done with it. Many of the people who don't want to
head over aren't going to be happy with any partial solution. If people
want to follow via email they can set up their own digests.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader
_______________________________________________
infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
To unsubscribe send an email to
infrastructure-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedora...
--
Stephen J Smoogen.