On lun., 2010-07-05 at 13:26 +0100, Jonathan Lange wrote: > On Fri, Jun 25, 2010 at 1:06 PM, Didier Roche <[email protected]> wrote: > > Le vendredi 25 juin 2010 à 21:54 +1000, Robert Collins a écrit : > >> I like the idea of sending emails when important account settings are > >> changed: it helps with: > >> - cross site attacks > >> - apis that permit changing such settings > >> - screen scraping via embedded browser instances > >> > >> and possibly more. > >> > >> Its also nonintrusive and straightforward, and we could include a > >> confirmation token in the email people get sent too, if we felt thats > >> needed. > >> > >> That is: > >> LP.me.addSSHKey(...) > >> -> email sent > >> <-202 ACCEPTED (please check your email and confirm via the token link in > >> it) > >> Quickly shows the user 'please check email' > >> User clicks in the email, ssh key is enabled / disabled. > > > > Sounds a good way to avoid all the non-permitted apps and hacks to go > > away. Love it! > > > > Well, at first release, people will have 3/4 mails if they setup > > nothing: > > - ssh > > - gpg > > - coc > > - ppa > > > > Hey everyone, > > I've created a LEP for this, summarising the discussion and > articulating the constraints that bind any solution: > https://dev.launchpad.net/LEP/ActivatingDevelopmentFromDesktop > > Please review the LEP. Tomorrow, if no one has objected I will mark it > approved. > > If we assume that a post-hoc email is enough (and I think it is), then > we have the following work items: > 1. Send an email every time someone registers an SSH key > 2. Send an email every time someone registers a GPG key > 3. Send an email to the user, confirming they have signed the code of conduct > 4. Create and expose an API for adding SSH keys > 5. Create and expose an API for adding GPG keys > 6. Create and expose an API for signing the code of conduct > * Perhaps this could be email? I don't care either way. > 7. Create and expose an API for creating a PPA > > Didier, the more of these you can do yourself, the more quickly this > will get done. Are there any of these items you feel you cannot do by > yourself?
I have a lot to do on other area for Ubuntu for alpha3 but I think what I can do is: 4/5/6/7 if someone help me on either the SSH or GPG write mode part by pair-programming. I have totally no confidence about having the time to send an email everytime someone register something. However, I think that if someone is doing one, I can dupe and adapt that for GPG/CoC > > Team leads, would you be able to spare someone to help Didier with > these tasks? None of them individually look particularly taxing for a > Launchpad developer. So yeah, I think that if someone can helps me for: 1 - sending an email on either SSH or GPG key 2 - create and expose an API for adding SSH or GPG key, I feel confident to be able to duplicate that for other part of the code. Just keep in mine that I won't be there this week. Thanks a lot! Cheers, Didier _______________________________________________ Mailing list: https://launchpad.net/~launchpad-dev Post to : [email protected] Unsubscribe : https://launchpad.net/~launchpad-dev More help : https://help.launchpad.net/ListHelp
