On 06/13/2015 02:04 PM, Peter Shute wrote: > I've had a request to join our list under a false name. If I enter their real > name in the Member Name field so I can tell who they are, who else can ever > see that? The member controls the display name used in list messages, don't > they?
The member's real_name attribute can be exposed in various ways. 1) The results of the email who command 2) The web roster beginning in 2.1.19 if the site allows it 3) The display name in a Munge From or Wrap Message From: if the original post has no display name. If the list's Privacy options... -> Subscription rules -> private_roster is set to List Admin Only, then only someone authenticated as admin can see 1) or 2). If the list's from_is_list setting is No (this setting is deprecated and should normally be No, use Privacy options... -> Sender filters -> dmarc_moderation_action instead) and the user's address in not in a domain with a domain with a DMARC reject or quarantine policy, then 3) is probably OK, but it's only certain if neither from_is_list nor dmarc_moderation_action is Munge From or Wrap Message. -- Mark Sapiro <[email protected]> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list [email protected] https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
