On Mon, Jul 04, 2016 at 01:18:14PM +0200, Enrico Zini wrote: > > Maybe the interface should > > 1) add a Sender: header, > > 2) not use the advocate's email address as From:, instead it might > > do something similar to RT and use for instance > > "From: Peter Palfrader via nm.debian.org <[email protected]>", and > > 3) it could Bcc the advocate so they get a copy of the mail too. > > I started working on this in branch b829419. > > The plan is, first, to split email from email_ldap, the former is used > by the site (to send notifications, as From: address to -newmaint, as > recipient for gpg-encrypted HMAC confirmation tokens). This should solve > the (imo) most urgent issue that is that there could be an unexpected > disclosure of an email address.
This is now done. In the statement page, it now also says: The statement will be sent to debian-newmaint as Enrico Zini <[email protected]>. and if I click on "[email protected]" I can change it. > About points 1 and 2, my goal with using the address in From: is to make > it so that replies to that mail can reach the advocate. Would it work if > I used [email protected] as From: and the advocate's email as Sender? I don't know enough of standard email client behaviour to figure what best to do here. I'll leave the bug open for now. Enrico -- GPG key: 4096R/634F4BD1E7AD5568 2009-05-08 Enrico Zini <[email protected]>
signature.asc
Description: PGP signature
