On 15 Apr, 2011, at 13:21 PM, David Kirkby wrote: > On 15 April 2011 17:51, Volker Braun <[email protected]> wrote: >> I would think that it is sufficient to only allow non-anonymous email >> accounts. For example: >> * an institutional address: .edu, .ac.uk, ... >> * a sourceforge-address associated to an active project >> * an address that has been used to post to google groups before (use >> search) >> People that want to use their gmail account, say, can still change their >> email address on the trac preferences. > > Any one of those seem fine - as would be any email from a well known > company (IBM, HP, Boeing, Airbus, Wolfram Research etc).
Not really. You can't rely on mail with this in the header: From: [email protected] You have to check the detailed headers to be (somewhat) sure that the 'From' address is valid. Most spammers either cobble together 'From' (as well as 'To') addresses, and may even forge most (if not all) of the detailed header content. > What I would find unacceptable is if some unknown person wants a trac > account for an anonymous account, having never posted to sage-devel or > sage-support. +1. I think posting to sage-devel/support would have to be a pre-requisite (why get a trac account otherwise?), RobertB's example notwithstanding. In the latter case, there may be an alternate approach, but for requests out of the blue, I can't think of a good reason to do it. Justin -- Justin C. Walker, Curmudgeon-At-Large Institute for the Absorption of Federal Funds -------- If you're not confused, You're not paying attention -------- -- To post to this group, send an email to [email protected] To unsubscribe from this group, send an email to [email protected] For more options, visit this group at http://groups.google.com/group/sage-devel URL: http://www.sagemath.org
