If you're supposed to do things fully automatic I think it should be
a little more secure than that.

Basically I just need a file of hash->pmc member id mappings. If things need to be
simple we could just put it in a plaintext file on the site.

Using a formula like gravatar does (http://en.gravatar.com/site/implement/hash/) you could create a file like "pmcs.txt" or similar. I could just add myself to the file like this

CAFEBABE1855b5ff21e4963273a886ED  krosenvold
DEADBEEF1855b5ff21e4963273a886ED  krosenvold
f9879d71855b5ff21e4963273a886bfc  krosenvold
A15212d71855b5ff21e4963273a886ED  krosenvold
ABADCAFE1855b5ff21e4963273a886ED  brett

You just get the file from the project site, hash the sender email and see if you have a match. I'm sure the guys here will have a zillion further ways to improve this scheme

Kristian


Den 23.06.2011 14:22, skrev Benson Margulies:
This scheme does not have to be secure. How about asking people to
just toss their memberid in the form availid:royfielding into the
message body if you don't use an apache.org from?

On Thu, Jun 23, 2011 at 1:02 AM, Kristian Rosenvold
<[email protected]>  wrote:
I am also sceptical to being forced into using the asf account unless
someone can explain a simple way to make my mail come from there via
something
IMAP/SMTP like. I have no problem with committing to voting only from,say 2
or 3 different accounts ;)

How about somehow querying the ASF maililinglist server to determine who's
on the pmc list ?

Maybe we could put md5/sha1 hashes of all our voting email adresses on the
team list http://maven.apache.org/team-list.html ?


Kristian



Den 23.06.2011 06:45, skrev Ralph Goers:
-1

I have used my dslextreme.com email for years and now have a couple dozen
ASF email lists on it.  [email protected] forwards to it. Event when I send
as [email protected] from gmail (which hosts dslexteme.com) or Mac Mail it
always still shows that it is sent by my dslextreme.com account (I tried to
do this the other day for moderation and it didn't work).  The only way I
have found to actually send from [email protected] is to log in to
people.apache.org and use mail.  If someone can explain a way to make
sending work then I'd be a lot more open to the idea.

Ralph

On Jun 22, 2011, at 3:20 PM, Benson Margulies wrote:

I wrote a program for the job, it reads my gmail and matches it
against the PMC membership. Unfortunately, not all of us vote from
email addresses that match our Apache Member IDs. Would people be
willing to use their @apache.org email?

Binding votes:

+1 votes

olamy
struberg

Total count 2

Binding 0 votes

Total count 0

Binding -1 votes

Total count 0

Nonbinding votes:

+1 votes

kristian.rosenvold
stephen.alan.connolly
herve.boutemy

Total count 3

Nonbinding 0 votes

Total count 0

Nonbinding -1 votes

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


Reply via email to