On Fri, Sep 4, 2026, at 14:41, Simo Sorce via devel wrote: > On Fri, 2026-09-04 at 18:34 +0000, Gary Buhrmaster wrote: >> On Fri, Sep 4, 2026 at 5:59 PM Christopher <[email protected]> >> wrote: >> > >> > But, I think Fedora would >> > probably have to provide the ability to create an application password >> > to authenticate to an SMTP server, because it shouldn't be >> > unauthenticated, and Fedora's MFA might be a bit troublesome with it. >> >> Kerberos or OAuth 2.0 authentication is possible >> (depending on lot's of "maybe"s), but running a >> full mail server today on today's Internet, with >> various anti-spoofing and UCE blocking by >> other organizations. is not an easy task (which >> is partially why many organizations outsource >> that functionality to someone else). > > Fedora clearly already runs a mail server given they need to receive > and process mailing lists ? > > And adding an authenticated only SMTP gateway (with strong app > passwords as well as krb and whatever other method is already supported > in postfix) would probably not be a huge change, but it is a change and > would require "some" maintenance. >
This has been looked at in the past, and there were significant problems with Fedora hosting a mail server of this sort. Due to the loose nature of the Fedora Project, Red Hat takes on the liability and in the past that meant email had to go into Red Hat itself for scanning, control, various legal requirements etc. It also means that certain requests for information and storage/copying have to be honoured (aka surveillance etc). Most of these were considered nonstarters. [At the previous times this was looked at, mailing lists fall under a different level of expectations of privacy and control. I haven't looked in at least 6 years so do not know what the current state is.] To be honest, I don't know how much longer 'vanity' email addresses are going to be possible as various rules and countermeasures come into place. At some point more places are going to do Maintenance and costs for this are also things which would need to be covered somewhere.. but frankly dealing with various legal issues was more of a killer. > -- > Simo Sorce > Distinguished Engineer > RHEL Crypto Team > Red Hat, Inc > > -- > _______________________________________________ > devel mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/[email protected] > Do not reply to spam, report it: > https://forge.fedoraproject.org/infra/tickets/issues/new -- Stephen J Smoogen. Let us be kind to one another, for most of us are fighting a hard battle. -- Ian MacClaren -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
