>Can we find a better way to identify ARC-related mail? Relying on >(only) the subject format opens a back door that could be used for >spamming. > >
Understood. An alternative to the current, simplistic "must be on the alias to post" spam handler could be along the lines of vectoring all the OS.o mailing lists thru Sun's spam firewall.... >John> ARC related mail must not require the sender to have membership >John> on any OS.o alias. That is, ARC related email will come from >John> many places, including non OS.o members. > >Can you give some examples? For example, ARC administrative staff might >not be active on opensolaris.org, but presumably there is (or will be) >an ARC announcement list that they'd want to be on. > This is easy - you send a comment to the open solaris ARC about ksh93, but you are not on the ksh93-interest alias, so your mail doesn't go to that alias. Or some random sun engineer (who is not an OS.o member) sends mail about the case to the alias, which isn't seen by anyone on OS.o. Or someone from the Debian world contributes some observations about how they dealt with ksh93 in their distro... The common thread is that each case will draw in different OS.o community and project aliases into the discussion, and the infrastructure needs to allow them to see the entire conversation. It also shoudn't get in the way of people who wish to contribute. -John
