[Mailman-Users] Re: mailman v2.x

2020-09-20 Thread Bill Cole

On 19 Sep 2020, at 8:39, Stephen J. Turnbull wrote:


As far as I know there are already obvious security holes in Python 2
if you need to use TLS, especially on Mac.  Python 2 is not up to
current security recommendations with respect to SSL and TLS versions,
and I suspect not with respect to other basic crypto.  I don't think
it's hard to configure those version exclusions, but it doesn't come
out of the box that way.  And on Mac you've got the mess that is an
Apple-specific TLS API that Python doesn't have a wrapper for last I
heard (it uses an bundled version of OpenSSL instead if you configure
it to support TLS).


That's a pretty obscure edge case.

Most people who use *current* MM2 on Mac do so via Homebrew or MacPorts 
builds, both of which also bring in a current OpenSSL by default.  If 
one insists on building from scratch using the system "openssl," then on 
any recent system it is actually a recent and reasonably safe LibreSSL.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-20 Thread Mark Sapiro
On 9/20/20 7:40 AM, Stephen J. Turnbull wrote:
> 
> Yes.  That means that the Mailman Cabal enjoys working with me and
> values what I do, and that's all it means.  By the way, I'm not sure
> why you keep mentioning the Mailman Cabal, There Is No Cabal. ;-)


Technically, mailman-cabal is just the name of a mailing list, nothing
more. Officially, the group is the Mailman Steering Committee.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-20 Thread Jim Popovitch via Mailman-Users
On Sun, 2020-09-20 at 23:40 +0900, Stephen J. Turnbull wrote:
> Jim Popovitch via Mailman-Users writes:
> 
> On Sun, 2020-09-20 at 18:23 +0900, Stephen J. Turnbull wrote:
> > > I imagine ARC support is something Jim Popovitch would like to have.
> 
> > You imagine wrong.
> 
> OK, so you don't believe in providing features that other users want.


blinking.gif

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-20 Thread Stephen J. Turnbull
Jim Popovitch via Mailman-Users writes:

 > You're on the Mailman Cabal

Yes.  That means that the Mailman Cabal enjoys working with me and
values what I do, and that's all it means.  By the way, I'm not sure
why you keep mentioning the Mailman Cabal, There Is No Cabal. ;-)

 >> I imagine ARC support is something Jim Popovitch would like to have.

 > You imagine wrong.

OK, so you don't believe in providing features that other users want.

 > Let's be realistic, nobody says "I'm gonna ditch my MTA and replace
 > it with Mailman",

True.  What they do is to configure Mailman to perform functions that
we, like everybody else, recommend be implemented in the MTA (such as
spam filtering and ARC).  That is the day-to-day reality of supporting
Mailman.

TINC-ly y'rs

Steve
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-20 Thread Jim Popovitch via Mailman-Users
On Sun, 2020-09-20 at 18:23 +0900, Stephen J. Turnbull wrote:
> I wrote:
> 
>  > > >> I'm pretty sure that at least for now I[1] can configure a
>  > > >> system to run Mailman 2 so that none of the above matters
> 
> "None of the above" includes other crypto.
> 
>  > > > I'm pretty sure that's pure FUD.
> 
> I do not agree.  Besides being able to talk SMTP (and some people have
> used it, though I'm sure it's very few nowadays), Mailman 2 talks DNS
> (for DMARC) although I am not sure it can deal with secure DNS (in
> fact, I'm not sure anyone can ;-).  DNS over HTTPS (DOH) is coming,
> which implies TLS.  

You're on the Mailman Cabal and that's what you came up with?!?

> Mailman 3's ARC handler has to do both encryption
> and decryption for ARC and decryption for DKIM, and that would be
> fairly easy to port (I'm pretty sure the underlying libraries are 2/3
> compatible).  (Ports are fair game because we're talking "future", and
> I imagine ARC support is something Jim Popovitch would like to have.)

You imagine wrong. I see ARC as a piece of the delivery phase, Mailman
should sit well before that.  Let's be realistic, nobody says "I'm gonna
ditch my MTA and replace it with Mailman", just like nobody says "I'm
going to process MLM email without a caching DNS resolver".  

> Any secure version of those protocols that Mailman 2 doesn't have
> could Mailman unusable if some important partner decides to require
> it.

> I'm sure I'm missing stuff, too.  So no, it may not be more likely
> than not (given current status of "EOL"), but it's not pure FUD.  And
> if the "reopen Mailman 2 for features" crowd has its way, the
> likelihood goes up IMO (because I don't think they're likely to
> succeed in getting a sufficiently stable port of Mailman 2 to Python
> 3).

Challenge accepted! Gauntlet: If we succeed, I challenge you to retire
immediately.

(You're right Barry, this is fun!)  

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-20 Thread Stephen J. Turnbull
I wrote:

 > > >> I'm pretty sure that at least for now I[1] can configure a
 > > >> system to run Mailman 2 so that none of the above matters

"None of the above" includes other crypto.

 > > > I'm pretty sure that's pure FUD.

I do not agree.  Besides being able to talk SMTP (and some people have
used it, though I'm sure it's very few nowadays), Mailman 2 talks DNS
(for DMARC) although I am not sure it can deal with secure DNS (in
fact, I'm not sure anyone can ;-).  DNS over HTTPS (DOH) is coming,
which implies TLS.  Mailman 3's ARC handler has to do both encryption
and decryption for ARC and decryption for DKIM, and that would be
fairly easy to port (I'm pretty sure the underlying libraries are 2/3
compatible).  (Ports are fair game because we're talking "future", and
I imagine ARC support is something Jim Popovitch would like to have.)
Any secure version of those protocols that Mailman 2 doesn't have
could Mailman unusable if some important partner decides to require
it.

I'm sure I'm missing stuff, too.  So no, it may not be more likely
than not (given current status of "EOL"), but it's not pure FUD.  And
if the "reopen Mailman 2 for features" crowd has its way, the
likelihood goes up IMO (because I don't think they're likely to
succeed in getting a sufficiently stable port of Mailman 2 to Python
3).

Steve
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-19 Thread Matthew Pounsett
On Sat, 19 Sep 2020 at 13:07, Mark Sapiro  wrote:

> >> I'm pretty sure that at least for now I[1] can configure a system to
> >> run Mailman 2 so that none of the above matters (eg, have the web
> >> server and MTA speak TLS so that Mailman doesn't have to), but I'm not
> >> confident that will last for very long.
> >>
> >
> > I'm pretty sure that's pure FUD.  I'm not the expert on mailman that most
> > of you are, but I can think of no reason for mailman itself to ever speak
> > HTTP or SMTP, and therefore no reason for it to need to do TLS.  I'd be
> > very surprised at anyone running a mailman setup where there wasn't a web
> > server and an MTA sitting between mailman and the rest of the Internet.
> Am
> > I wrong about that?
>
>
> I think that was exactly Steve's point.
>

Then why say that he's not confident he'll be able to keep MM2 from
speaking TLS for long?  Why is he only "pretty sure" that he can configure
mm2 in such a way that it doesn't need to speak TLS?  Those statements make
no sense to me, and are the reason I called this email out as FUD.


> Does mailman even include its own web server?  I didn't think it did.
>
> No, it doesn't. It does however do SMTP to an MTA that isn't necessarily
> on localhost, so TLS can be an issue there.
>

Okay, so it's possible to set up so that it needs to speak TLS, but by no
means is there any event approaching that's going to make that necessary.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-19 Thread Dmitri Maziuk

On 9/19/2020 11:50 AM, Matthew Pounsett wrote:


I'm pretty sure that's pure FUD.  I'm not the expert on mailman that most
of you are, but I can think of no reason for mailman itself to ever speak
HTTP or SMTP, and therefore no reason for it to need to do TLS.  I'd be
very surprised at anyone running a mailman setup where there wasn't a web
server and an MTA sitting between mailman and the rest of the Internet.  Am
I wrong about that?


IMO a lot of this crap comes from the Knee-Jerk Security Department 
fueled by Google's "our data collection is secure by default" PR. It is 
for many practical purposes FUD but since the huge scary "Insecurity! 
Run! Run Away!" dialog box is now built into every client app and most 
users don't know any better, we're SOL.


This is why the "I won't ever need any new features in MM2" stance is 
not realistic: *I* may not, but it's not up to me.


Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-19 Thread Mark Sapiro
On 9/19/20 9:50 AM, Matthew Pounsett wrote:
> I'm probably going to regret getting involved in this conversation, but ...
> 
> On Sat, 19 Sep 2020 at 08:48, Stephen J. Turnbull <
> turnbull.stephen...@u.tsukuba.ac.jp> wrote:
> 
>> I'm pretty sure that at least for now I[1] can configure a system to
>> run Mailman 2 so that none of the above matters (eg, have the web
>> server and MTA speak TLS so that Mailman doesn't have to), but I'm not
>> confident that will last for very long.
>>
> 
> I'm pretty sure that's pure FUD.  I'm not the expert on mailman that most
> of you are, but I can think of no reason for mailman itself to ever speak
> HTTP or SMTP, and therefore no reason for it to need to do TLS.  I'd be
> very surprised at anyone running a mailman setup where there wasn't a web
> server and an MTA sitting between mailman and the rest of the Internet.  Am
> I wrong about that?


I think that was exactly Steve's point.


> Does mailman even include its own web server?  I didn't think it did.


No, it doesn't. It does however do SMTP to an MTA that isn't necessarily
on localhost, so TLS can be an issue there.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-19 Thread Matthew Pounsett
I'm probably going to regret getting involved in this conversation, but ...

On Sat, 19 Sep 2020 at 08:48, Stephen J. Turnbull <
turnbull.stephen...@u.tsukuba.ac.jp> wrote:

> I'm pretty sure that at least for now I[1] can configure a system to
> run Mailman 2 so that none of the above matters (eg, have the web
> server and MTA speak TLS so that Mailman doesn't have to), but I'm not
> confident that will last for very long.
>

I'm pretty sure that's pure FUD.  I'm not the expert on mailman that most
of you are, but I can think of no reason for mailman itself to ever speak
HTTP or SMTP, and therefore no reason for it to need to do TLS.  I'd be
very surprised at anyone running a mailman setup where there wasn't a web
server and an MTA sitting between mailman and the rest of the Internet.  Am
I wrong about that?

Does mailman even include its own web server?  I didn't think it did.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-19 Thread Stephen J. Turnbull
Christian F Buser via Mailman-Users writes:

 > I am in no way a programmer - but as I understand it, Python 2 can
 > live alongside Python 3 without any problems.

True.

 > The EOL declaration for Python 2 does NOT mean that Python 2 will
 > stop working on the date the publishers announced. There will just
 > be no improvements. And as long as there are no obvious security
 > holes in Python 2, it is absolutely not necessary to retire it on
 > any machine.

As far as I know there are already obvious security holes in Python 2
if you need to use TLS, especially on Mac.  Python 2 is not up to
current security recommendations with respect to SSL and TLS versions,
and I suspect not with respect to other basic crypto.  I don't think
it's hard to configure those version exclusions, but it doesn't come
out of the box that way.  And on Mac you've got the mess that is an
Apple-specific TLS API that Python doesn't have a wrapper for last I
heard (it uses an bundled version of OpenSSL instead if you configure
it to support TLS).

I'm pretty sure that at least for now I[1] can configure a system to
run Mailman 2 so that none of the above matters (eg, have the web
server and MTA speak TLS so that Mailman doesn't have to), but I'm not
confident that will last for very long.

Footnotes: 
[1]  Or any reasonably up-to-date sysadmin.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-19 Thread Stephen J. Turnbull
Matthew Pounsett writes:

 > If someone was going to undertake a rewrite of Postorius, using a
 > different web development framework (e.g. Flask, but pretty much
 > anything that isn't Django) would at least remove one major moving
 > part from the install process.

Rewrites of Postorius or HyperKitty to use a different web framework
in the near or medium term are extremely unlikely, at least by the
core team.  And of course if you want to actually get rid of Django
you have to do both.

HyperKitty and Postorius between them do use a lot of Django
functionality: the ORM, the social authentication module, the
templating, sass, and so on.  I don't know how much of that is easily
implemented with Flask or other "lightweight" frameworks plus easily
plugged-in modules, and how much is going to be a lot of
do-it-yourself work.

I'm not saying "don't do it", but it's not obvious to me that you'll
really buy that much simplicity for anybody without (to me, anyway)
prohibitive amounts of effort.  Note that both Barry and Brian opted
for rearchitecture as well as complete rewrites of functionality
common to the existing and new versions.  There's good reason for
that!

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Dmitri Maziuk

On 9/17/2020 3:59 PM, Phil Stracchino wrote:


...  The writing has been on the wall
for Python2 for nearly ten years.  The EOL date has already been
extended five years.  It's time to let it go.



The big concern du jour in science community is: can you take your 
scripts from 10 years ago and re-run them, and will you get the same 
groundbreaking result that you published back then if so. That's the 
main motivation for singularity, among other things.


So no: you can't let it go. You can freeze-dry it in a container, and 
nobody will probably ever try to reproduce that old junk, but if you do 
"let it go" consider this: the next vaccine that gets injected in your 
bloodstream may have originated with a trivial bug in someone's 10yo 
python script, and the only way you find out is when you die in horrible 
pain.


Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Phil Stracchino
On 2020-09-17 14:34, Christian F Buser via Mailman-Users wrote:
> Of course I do not want do move anyone away from Mailman. If Phil absolutely 
> wants to retire Python 2 on his machine(s),

And that is precisely my motivation.  The writing has been on the wall
for Python2 for nearly ten years.  The EOL date has already been
extended five years.  It's time to let it go.


-- 
  Phil Stracchino
  Babylon Communications
  ph...@caerllewys.net
  p...@co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Phil Stracchino
On 2020-09-17 13:59, Christian F Buser wrote:
> I am in no way a programmer - but as I understand it, Python 2 can live 
> alongside Python 3 without any problems. 

Oh, indeed, it totally can.  And right now, it does, on two of my three
Linux boxes.  I've managed to get Python2 completely off the third, but
the other two still have dependencies on it.


> The EOL declaration for Python 2 does NOT mean that Python 2 will stop 
> working on the date the publishers announced. There will just be no 
> improvements. And as long as there are no obvious security holes in Python 2, 
> it is absolutely not necessary to retire it on any machine.

I know it's not *necessary*.  But I consider it good hygiene not to use
EOL software.


> If you absolutely want to get rid of Python 2, either use Mailman 3, or 
> another mailing list manager. 

I'm planning to migrate to Mailman3 as soon as Gentoo stabilizes the
ebuild.  It's been a long wait, but stabilization is imminent at this point.


-- 
  Phil Stracchino
  Babylon Communications
  ph...@caerllewys.net
  p...@co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-09-17 at 14:56 -0400, Brian Carpenter wrote:
> On 9/17/20 2:27 PM, Jim Popovitch via Mailman-Users wrote:
> > On Thu, 2020-09-17 at 14:15 -0400, Brian Carpenter wrote:
> > Absolutely not.  I'm intrigued by the idea of mailman-core (1/3 of mm3)
> > with a lightweight web-based GUI in front of it.  But, to date, that
> > doesn't exist. I also don't see the need for a db and api with a MLM,
> > but I do see value in those things.
> 
> No just a need for a 15 year out-dated user interface and a MLM that 
> requires an EOL version of Python. Otherwise Mailman 3 can behave in the 
> same manner as Mailman 2. The installation of Mailman 3 takes an hour. 
> That includes OS, web server, database, MTA and python 3. All of the 
> complexity you continue to gripe about is, to use your word, fud.

The age of a product shouldn't determine it's usefulness.  Is Mark less
useful because of his age?  WTF dude?  

I don't get how you are a champion of mm3 being a simple install. You do
realize this list's archive is full of your problems with mm3, right? 
That, and you had to replace 2/3 of mm3 to get what you wanted?  How is
that easy, and how is that done in 1 hour?

> 
> > That's just FUD.  Don't take offense because I haven't taken you up on
> > your mm3 work around(s).  I have mm3 installs, but they are not what my
> > users want.
> 
> There it is again. A use of a word meant to imply something negative. 
> Affinity and Empathy are not "workarounds". They are modern interfaces 
> that I developed because I host MANY list owners with all kinds of 
> requirements. I also wanted something to set apart myself from other 
> potential competitors. I am still using Postorius and Hyperkitty to for 
> Mailman 3 hosting clients. They are still fine to work with.
> 
> So your users don't want to use a MLM that works just like Mailman 2? 
> Mailman 3 can just be that but the potential to be more is there, a 
> potential that Mailman 2 does not have.
> 
> 
> > Again, you're the guy who had to pay someone else to make 2/3rds of
> > Mailman 3 work for you.
> 
> Again a disingenuous remark. You pull the same bs with Stephen all the 
> time. Mailman 3 works fine apart from Affinity/Empathy. I accomplished a 
> bold marketing and brand move with those two applications. You wouldn't 
> understand that. 

I do understand it, it's just that your business doesn't matter one way
or the other to me.  I get the sense that you might think we are MLM
competitors, we're not.  You have a MLM business, I just host a few
lists for others at my expense.

> I am no longer on the same playing field with budget 
> hosts. I have set my company apart from them. Why because Mailman 3 gave 
> me the ability to do that. Mailman 2 did not.
> 
> > My "custom scripts" are cron+bash scripts to send monthly mailman
> > reports out to admins.  Hardly anything that can't be re-worked anywhere
> > else, but why?
> 
> Then why bring them up as a reason to not use MM3?

They were a bullet point in a list of bullet points, nothing more.

> 
> > > Please let Simon know I can install Mailman 3 and migrate his list to
> > > Mailman 3 within a day.
> > I won't be your salesman.
> 
> Yet you have been in the past. Jimmy, did I offend you???

In the past I simply sent someone to you because they came to me asking
to pay me to do a mm3 migration. I told them I was no fan, but that you
were.  I don't get your "Jimmy" comment, but whatever dude.

> > I hope you one day see how ridiculous that sounds as an elevator pitch.
> 
> Not anymore ridiculous as your proposals to work harder to keep an EOL 
> MLM application alive when its replacement is alive and well.

I'm curious, do you get a new car every year when the dealership
replaces last year's model?

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Brian Carpenter

On 9/17/20 2:27 PM, Jim Popovitch via Mailman-Users wrote:

On Thu, 2020-09-17 at 14:15 -0400, Brian Carpenter wrote:
Absolutely not.  I'm intrigued by the idea of mailman-core (1/3 of mm3)
with a lightweight web-based GUI in front of it.  But, to date, that
doesn't exist. I also don't see the need for a db and api with a MLM,
but I do see value in those things.


No just a need for a 15 year out-dated user interface and a MLM that 
requires an EOL version of Python. Otherwise Mailman 3 can behave in the 
same manner as Mailman 2. The installation of Mailman 3 takes an hour. 
That includes OS, web server, database, MTA and python 3. All of the 
complexity you continue to gripe about is, to use your word, fud.




That's just FUD.  Don't take offense because I haven't taken you up on
your mm3 work around(s).  I have mm3 installs, but they are not what my
users want.


There it is again. A use of a word meant to imply something negative. 
Affinity and Empathy are not "workarounds". They are modern interfaces 
that I developed because I host MANY list owners with all kinds of 
requirements. I also wanted something to set apart myself from other 
potential competitors. I am still using Postorius and Hyperkitty to for 
Mailman 3 hosting clients. They are still fine to work with.


So your users don't want to use a MLM that works just like Mailman 2? 
Mailman 3 can just be that but the potential to be more is there, a 
potential that Mailman 2 does not have.




Again, you're the guy who had to pay someone else to make 2/3rds of
Mailman 3 work for you.


Again a disingenuous remark. You pull the same bs with Stephen all the 
time. Mailman 3 works fine apart from Affinity/Empathy. I accomplished a 
bold marketing and brand move with those two applications. You wouldn't 
understand that. I am no longer on the same playing field with budget 
hosts. I have set my company apart from them. Why because Mailman 3 gave 
me the ability to do that. Mailman 2 did not.



My "custom scripts" are cron+bash scripts to send monthly mailman
reports out to admins.  Hardly anything that can't be re-worked anywhere
else, but why?


Then why bring them up as a reason to not use MM3?



Please let Simon know I can install Mailman 3 and migrate his list to
Mailman 3 within a day.

I won't be your salesman.


Yet you have been in the past. Jimmy, did I offend you???



I hope you one day see how ridiculous that sounds as an elevator pitch.


Not anymore ridiculous as your proposals to work harder to keep an EOL 
MLM application alive when its replacement is alive and well.




--
Brian Carpenter
Harmonylists.com
Emwd.com
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Christian F Buser via Mailman-Users
Hello Brian Carpenter. On Thu, 17 Sep 2020 14:20:06 -0400, you wrote:

> I am sure Christian also meant to include me in their list of other 
> choices: https://harmonylists.com. At least I still offer Mailman 3 
> howbeit as a SaaS provider and not encourage a fellow mailman user on 
> a mailman user list to move away from using mailman.

Of course I do not want do move anyone away from Mailman. If Phil absolutely 
wants to retire Python 2 on his machine(s), he should either use MM3 or any 
other products. And I just did not think of your services when I wrote my reply 
to him. Good that you mentioned them. 

Christian 

-- 
Christian F. Buser, Hohle Gasse 6, CH-5507 Mellingen (Switzerland)  
Hilfe fuer Strassenkinder in Ghana: https://www.chance-for-children.org
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-09-17 at 14:15 -0400, Brian Carpenter wrote:
> On 9/17/20 1:45 PM, Jim Popovitch via Mailman-Users wrote:
> > That's kind of my point. mm2 works for me and my use, I'd much rather
> > prefer to keep it working than to rip it out and replace it, including
> > installed and maintaining a database, a framework, a new setup of custom
> > admin scripts unique to my setup, etc.  No one has sold me on mm3 yet.
> 
> It's because you don't want to be sold. 

Absolutely not.  I'm intrigued by the idea of mailman-core (1/3 of mm3)
with a lightweight web-based GUI in front of it.  But, to date, that
doesn't exist. I also don't see the need for a db and api with a MLM,
but I do see value in those things.

> But I will say this, what you 
> want as a list owner, and what your list members want are two different 
> things. They may line up and they may not. But I suspect many list 
> owners are watching their mm2 lists shrink either in membership size or 
> posting activity. Communication behavior changes. Social media has had a 
> tremendous impact on how communications work on the web. Integrations 
> are very important to a lot of groups. None of these things are possible 
> with Mailman 2. Mailman 2 is inflexible as your position to not be 
> swayed to use Mailman 3.

That's just FUD.  Don't take offense because I haven't taken you up on
your mm3 work around(s).  I have mm3 installs, but they are not what my
users want.

> Also your above comments show your unjustified bias against Mailman 3: 
> "you have to do so many things to use Mailman 3". No you don't. 

Again, you're the guy who had to pay someone else to make 2/3rds of
Mailman 3 work for you.

> I think 
> the real culprit is your custom admin scripts that you are using to make 
> up for whatever shortcomings you found with MM2.  You don't want to go 
> through the task of getting them to work with Mailman 3. Perhaps you 
> can't. So at least that is a valid point for wanting to stick with MM2. 
> However that is not the fault of Mailman 3.

My "custom scripts" are cron+bash scripts to send monthly mailman
reports out to admins.  Hardly anything that can't be re-worked anywhere
else, but why?

> > > I'm not sure what the point of this is. According to
> > > ;;, MAILOP is already on Mailman 3.
> > They are not, (i'd guess most likely due to overly optimistic views on
> > how easy a migration to mm3 would be, perhaps they needed a bigger
> > server or had to hire a database guy, who really knows).  What i do know
> > is that, from a post yesterday, they are still using an old Mailman
> > version:
> > 
> > Date: Wed, 16 Sep 2020 08:37:43 -0500
> > Subject: Re: [mailop] Spam using bit.ly link shorteners,
> >  this time via Outlook
> > X-BeenThere:mai...@mailop.org
> > X-Mailman-Version: 2.1.18
> > Precedence: list
> > List-Id: For mail operators 
> > 
> > 
> > I'd email Simon to ask why the discrepancy, but he's already alluded to
> > it a few times on their list.  Note: he originally planned to started
> > moving mailop.org to mm3 last December, so he's had plenty of time.
> 
> Please let Simon know I can install Mailman 3 and migrate his list to 
> Mailman 3 within a day.

I won't be your salesman. 

> > > It appears NANOG has only 3 public Mailman 2.1 lists and only one has
> > > archives pre-dating MM 2.1 which could require attention before
> > > importing to HyperKitty. So list migration via `mailman import21` and
> > > `django-admin hyperkitty_import` should be straightforward.
> > > 
> > > I guess you are saying that step 1, "First install Mailman 3" would be
> > > the sticking point, but this is the same whether you are NANOG or
> > > mail.python.org or tiny site with one list, and it has been accomplished
> > > multiple times by multiple people. I've documented my experience at
> > > ;;. Brian's take is at
> > > ;;.
> > > 
> > I've read both of those links in the past, and honestly that is good
> > detail to have.  What I was looking for in an "elevator pitch" is a 30
> > second statement on what benefit someone would have by moving to mm3.
> > Given the time and effort (big or small) why should anyone move to mm3
> > if their mm2 installation still works and functions fine?  There are
> > people here saying "move to mm3 now!!, etc.", but what's the selling
> > point?
> > 
> > -Jim P.
> 
> I have been posting those selling points frequently. But you are 
> *inflexible* in your insistence in using MM2.

So re-capping them should be easy and do'able, right?

> I will give you a 3 second selling point: *flexibility*, choices, future 
> new features, searchable archives, a growing community of users, etc.

I hope you one day see how ridiculous that sounds as an elevator pitch.
;-)

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to 

[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Brian Carpenter

On 9/17/20 1:59 PM, Christian F Buser via Mailman-Users wrote:

I am in no way a programmer - but as I understand it, Python 2 can live 
alongside Python 3 without any problems.

The EOL declaration for Python 2 does NOT mean that Python 2 will stop working 
on the date the publishers announced. There will just be no improvements. And 
as long as there are no obvious security holes in Python 2, it is absolutely 
not necessary to retire it on any machine.

I am administering some mailing lists which run on MM2 / cPanel, and they work. 
I have no access to that machine other than via cPanel, and it is in most cases 
sufficient. The question of Python 2 yes or no is up to the provider.

If you absolutely want to get rid of Python 2, either use Mailman 3, or another 
mailing list manager.

There are some other mailing list managers available - some for free, some for money. I can 
propose 2 of them here, you mey find others which may work for you. I am also operating some 
mailing lists privately, they don’t use Mailman. They use CommuniGate Pro in the 
"community edition" (free version with limited number of mail and other users, but 
unlimited number of mailing lists and mailing list subscribers). This runs on an older Mac mini 
in my basement - CGPro is also available for Windows, Linux, etc. 
-

And there is Sympa, a mailing list manager created by people from French universities, 
see  and

Christian


I am sure Christian also meant to include me in their list of other 
choices: https://harmonylists.com. At least I still offer Mailman 3 
howbeit as a SaaS provider and not encourage a fellow mailman user on a 
mailman user list to move away from using mailman.


--
Brian Carpenter
Harmonylists.com
Emwd.com

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Brian Carpenter

On 9/17/20 1:45 PM, Jim Popovitch via Mailman-Users wrote:

That's kind of my point. mm2 works for me and my use, I'd much rather
prefer to keep it working than to rip it out and replace it, including
installed and maintaining a database, a framework, a new setup of custom
admin scripts unique to my setup, etc.  No one has sold me on mm3 yet.


It's because you don't want to be sold. But I will say this, what you 
want as a list owner, and what your list members want are two different 
things. They may line up and they may not. But I suspect many list 
owners are watching their mm2 lists shrink either in membership size or 
posting activity. Communication behavior changes. Social media has had a 
tremendous impact on how communications work on the web. Integrations 
are very important to a lot of groups. None of these things are possible 
with Mailman 2. Mailman 2 is inflexible as your position to not be 
swayed to use Mailman 3.


Also your above comments show your unjustified bias against Mailman 3: 
"you have to do so many things to use Mailman 3". No you don't. I think 
the real culprit is your custom admin scripts that you are using to make 
up for whatever shortcomings you found with MM2.  You don't want to go 
through the task of getting them to work with Mailman 3. Perhaps you 
can't. So at least that is a valid point for wanting to stick with MM2. 
However that is not the fault of Mailman 3.



I'm not sure what the point of this is. According to
;, MAILOP is already on Mailman 3.

They are not, (i'd guess most likely due to overly optimistic views on
how easy a migration to mm3 would be, perhaps they needed a bigger
server or had to hire a database guy, who really knows).  What i do know
is that, from a post yesterday, they are still using an old Mailman
version:

Date: Wed, 16 Sep 2020 08:37:43 -0500
Subject: Re: [mailop] Spam using bit.ly link shorteners,
 this time via Outlook
X-BeenThere:mai...@mailop.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: For mail operators 


I'd email Simon to ask why the discrepancy, but he's already alluded to
it a few times on their list.  Note: he originally planned to started
moving mailop.org to mm3 last December, so he's had plenty of time.


Please let Simon know I can install Mailman 3 and migrate his list to 
Mailman 3 within a day.





It appears NANOG has only 3 public Mailman 2.1 lists and only one has
archives pre-dating MM 2.1 which could require attention before
importing to HyperKitty. So list migration via `mailman import21` and
`django-admin hyperkitty_import` should be straightforward.

I guess you are saying that step 1, "First install Mailman 3" would be
the sticking point, but this is the same whether you are NANOG or
mail.python.org or tiny site with one list, and it has been accomplished
multiple times by multiple people. I've documented my experience at
;. Brian's take is at
;.


I've read both of those links in the past, and honestly that is good
detail to have.  What I was looking for in an "elevator pitch" is a 30
second statement on what benefit someone would have by moving to mm3.
Given the time and effort (big or small) why should anyone move to mm3
if their mm2 installation still works and functions fine?  There are
people here saying "move to mm3 now!!, etc.", but what's the selling
point?

-Jim P.


I have been posting those selling points frequently. But you are 
*inflexible* in your insistence in using MM2.


I will give you a 3 second selling point: *flexibility*, choices, future 
new features, searchable archives, a growing community of users, etc.


--
Brian Carpenter
Harmonylists.com
Emwd.com

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Christian F Buser via Mailman-Users
Hello Phil Stracchino. On Thu, 17 Sep 2020 12:37:08 -0400, you wrote:

> .. Except for the part where it requires me to keep Python 2 installed
> beyond its second, extended, we absolutely mean it this time, no more
> extensions, declared EOL.
> 
> It's not that I need anything Mailman 2 doesn't do.  (Except run on
> Python 3.)  It's that I need Python 2 to be gone, dead and buried with a
> fork stuck in it.  I'm just waiting for Gentoo's Mailman 3 ebuild to be
> flagged stable.

I am in no way a programmer - but as I understand it, Python 2 can live 
alongside Python 3 without any problems. 

The EOL declaration for Python 2 does NOT mean that Python 2 will stop working 
on the date the publishers announced. There will just be no improvements. And 
as long as there are no obvious security holes in Python 2, it is absolutely 
not necessary to retire it on any machine. 

I am administering some mailing lists which run on MM2 / cPanel, and they work. 
I have no access to that machine other than via cPanel, and it is in most cases 
sufficient. The question of Python 2 yes or no is up to the provider. 

If you absolutely want to get rid of Python 2, either use Mailman 3, or another 
mailing list manager. 

There are some other mailing list managers available - some for free, some for 
money. I can propose 2 of them here, you mey find others which may work for 
you. I am also operating some mailing lists privately, they don’t use Mailman. 
They use CommuniGate Pro in the "community edition" (free version with limited 
number of mail and other users, but unlimited number of mailing lists and 
mailing list subscribers). This runs on an older Mac mini in my basement - 
CGPro is also available for Windows, Linux, etc. - 

And there is Sympa, a mailing list manager created by people from French 
universities, see  and 


Christian 

-- 
Christian F. Buser, Hohle Gasse 6, CH-5507 Mellingen (Switzerland)  
Hilfe fuer Strassenkinder in Ghana: http://www.chance-for-children.org
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-09-17 at 09:07 -0700, Mark Sapiro wrote:
> On 9/17/20 8:04 AM, Jim Popovitch via Mailman-Users wrote:
> > On Thu, 2020-09-17 at 07:54 -0700, Mark Sapiro wrote:
> > > Forward to where?
> > 
> > Oh the irony of you asking that question. :)  If we go back a year,
> > there were STARK warnings about the EOL of mm2.  Blatant EOL warnings. 
> > To me, a "path forward" is a way past that, a continued L(ife) with
> > something that people know, and something that meets their needs.
> 
> The EOL notices were clarified to mean "no new features" I committed to
> continue to fix critical bugs and security issues going forward.

I can't say this enough, Thank you for clarifying that issue because it
does mean a lot to a lot of people when it comes from you.

> If Mailman 2.1 meets their needs now, why won't it continue to do so as
> it is? (Aside: I still sometimes use Adobe Reader 9 for Linux on my
> desktop even though it has been unsupported and unavailable from Adobe
> for years.)

That's kind of my point. mm2 works for me and my use, I'd much rather
prefer to keep it working than to rip it out and replace it, including
installed and maintaining a database, a framework, a new setup of custom
admin scripts unique to my setup, etc.  No one has sold me on mm3 yet.

> 
> > Flipping the coin around, make the actual written case, an "elevator
> > pitch" if you will, for some entity like NANOG or MAILOP to migrate to
> > mm3 this weekend.  Let's see what that looks like.
> 
> I'm not sure what the point of this is. According to
> ;, MAILOP is already on Mailman 3.

They are not, (i'd guess most likely due to overly optimistic views on
how easy a migration to mm3 would be, perhaps they needed a bigger
server or had to hire a database guy, who really knows).  What i do know
is that, from a post yesterday, they are still using an old Mailman
version: 

Date: Wed, 16 Sep 2020 08:37:43 -0500
Subject: Re: [mailop] Spam using bit.ly link shorteners,
this time via Outlook
X-BeenThere: mai...@mailop.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: For mail operators 


I'd email Simon to ask why the discrepancy, but he's already alluded to
it a few times on their list.  Note: he originally planned to started
moving mailop.org to mm3 last December, so he's had plenty of time.


> It appears NANOG has only 3 public Mailman 2.1 lists and only one has
> archives pre-dating MM 2.1 which could require attention before
> importing to HyperKitty. So list migration via `mailman import21` and
> `django-admin hyperkitty_import` should be straightforward.
> 
> I guess you are saying that step 1, "First install Mailman 3" would be
> the sticking point, but this is the same whether you are NANOG or
> mail.python.org or tiny site with one list, and it has been accomplished
> multiple times by multiple people. I've documented my experience at
> ;. Brian's take is at
> ;.
> 

I've read both of those links in the past, and honestly that is good
detail to have.  What I was looking for in an "elevator pitch" is a 30
second statement on what benefit someone would have by moving to mm3. 
Given the time and effort (big or small) why should anyone move to mm3
if their mm2 installation still works and functions fine?  There are
people here saying "move to mm3 now!!, etc.", but what's the selling
point? 

-Jim P.



--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Phil Stracchino
On 2020-09-17 12:07, Mark Sapiro wrote:
> If Mailman 2.1 meets their needs now, why won't it continue to do so as
> it is? (Aside: I still sometimes use Adobe Reader 9 for Linux on my
> desktop even though it has been unsupported and unavailable from Adobe
> for years.)


Weighing in on this question alone, Mailman 2 does everything that I
actually need a mail list manager to do for me, and everything I
anticipate needing it to do in the future.

... Except for the part where it requires me to keep Python 2 installed
beyond its second, extended, we absolutely mean it this time, no more
extensions, declared EOL.

It's not that I need anything Mailman 2 doesn't do.  (Except run on
Python 3.)  It's that I need Python 2 to be gone, dead and buried with a
fork stuck in it.  I'm just waiting for Gentoo's Mailman 3 ebuild to be
flagged stable.


-- 
  Phil Stracchino
  Babylon Communications
  ph...@caerllewys.net
  p...@co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Dmitri Maziuk

On 9/17/2020 9:24 AM, Brian Carpenter wrote:


FYI, here is a decent comparison of Django vs Flask:

https://hackr.io/blog/flask-vs-django

In the article, this was said:

"Django is suited for bigger projects that need a lot of functionality. 
For simpler projects, the features might be an overdose"


Meh. The real deal is Django is the kind of framework that makes you 
program for the framework. Flask gives you everything you need and does 
not force you to touch anything you don't -- not that there is a lot of 
the latter in it.


Django is suited for the projects where the goal is write an application 
in django ecosystem. For everything else, it is not.


Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Mark Sapiro
On 9/17/20 8:04 AM, Jim Popovitch via Mailman-Users wrote:
> On Thu, 2020-09-17 at 07:54 -0700, Mark Sapiro wrote:
>>
>> Forward to where?
> 
> Oh the irony of you asking that question. :)  If we go back a year,
> there were STARK warnings about the EOL of mm2.  Blatant EOL warnings. 
> To me, a "path forward" is a way past that, a continued L(ife) with
> something that people know, and something that meets their needs.


The EOL notices were clarified to mean "no new features" I committed to
continue to fix critical bugs and security issues going forward.

If Mailman 2.1 meets their needs now, why won't it continue to do so as
it is? (Aside: I still sometimes use Adobe Reader 9 for Linux on my
desktop even though it has been unsupported and unavailable from Adobe
for years.)


> Flipping the coin around, make the actual written case, an "elevator
> pitch" if you will, for some entity like NANOG or MAILOP to migrate to
> mm3 this weekend.  Let's see what that looks like.


I'm not sure what the point of this is. According to
, MAILOP is already on Mailman 3.

It appears NANOG has only 3 public Mailman 2.1 lists and only one has
archives pre-dating MM 2.1 which could require attention before
importing to HyperKitty. So list migration via `mailman import21` and
`django-admin hyperkitty_import` should be straightforward.

I guess you are saying that step 1, "First install Mailman 3" would be
the sticking point, but this is the same whether you are NANOG or
mail.python.org or tiny site with one list, and it has been accomplished
multiple times by multiple people. I've documented my experience at
. Brian's take is at
.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-09-17 at 07:54 -0700, Mark Sapiro wrote:
> On 9/17/20 7:36 AM, Jim Popovitch via Mailman-Users wrote:
> > Here's my POV, if mm2 can (and it appears to me that it
> > can somewhat easily) be fixed to use py3 then all the installed bases of
> > mm2 don't have to learn/deal/secure/test/manage/deal with a REST API
> > and/or Flask, etc.
> 
> Or they can just continue to use Mailman 2.1 with Python 2.7, and no one
> needs to do anything.
> 
> 
> > What I'm trying to do is
> > provide a painless (or, at least a less painful) path forward for all
> > those existing Mailman sites that don't want to deal with all the same
> > issues that are appearing over on the MM3-users list and in #mailman.
> 
> Forward to where?

Oh the irony of you asking that question. :)  If we go back a year,
there were STARK warnings about the EOL of mm2.  Blatant EOL warnings. 
To me, a "path forward" is a way past that, a continued L(ife) with
something that people know, and something that meets their needs.

Flipping the coin around, make the actual written case, an "elevator
pitch" if you will, for some entity like NANOG or MAILOP to migrate to
mm3 this weekend.  Let's see what that looks like.

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Brian Carpenter

On 9/17/20 10:36 AM, Jim Popovitch via Mailman-Users wrote:

Would it though?  Is that conjecture or based on available data that can
be analyzed?  Here's my POV, if mm2 can (and it appears to me that it
can somewhat easily) be fixed to use py3 then all the installed bases of
mm2 don't have to learn/deal/secure/test/manage/deal with a REST API
and/or Flask, etc.  All those current mm2 admins get to continue life as
they normally do.  They save a weekend (or a month in some cases) and
some even save some $$, by not having to significantly change their
Mailman installation or server size, etc.  What I'm trying to do is
provide a painless (or, at least a less painful) path forward for all
those existing Mailman sites that don't want to deal with all the same
issues that are appearing over on the MM3-users list and in #mailman.


I am seeing issues with MM2 on this list. Issues always exist with 
software applications so please stop using that as an argument against 
the adoption of Mailman 3. It's disingenuous.


Django is complex so moving away from it would reduce the complexity of 
a Mailman 3 installation procedure and maintenance. I manage dozens of 
mailman 2 and mailman 3 servers. When it comes to maintenance and 
support issues not much of a difference between the two. I will tell you 
this though, migrating a mm2 list to mm3 is easy and effective.


See, this discussion of changing interfaces for Mailman 3 itself 
demonstrates the flexibility of Mailman 3. A flexibility Mailman 2 will 
never see. The needs of list admins (and let's not forget list members) 
do change and they should as evolution of email discourse continues to 
change. Mailman 3 is in a better position to meet the needs of list 
admins (and let's not forget list members) far better than Mailman 2.


Personally having the ability to communicate with a list using email and 
a lightweight forum at the same time is a great thing. In fact, I think 
it is the future as list members will grow to like the flexibility. 
Let's not forget the way archives become instantly more useful with an 
include search feature in a Mailman 3 installation.


--
Brian Carpenter
Harmonylists.com
Emwd.com
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Mark Sapiro
On 9/17/20 7:36 AM, Jim Popovitch via Mailman-Users wrote:
> Here's my POV, if mm2 can (and it appears to me that it
> can somewhat easily) be fixed to use py3 then all the installed bases of
> mm2 don't have to learn/deal/secure/test/manage/deal with a REST API
> and/or Flask, etc.


Or they can just continue to use Mailman 2.1 with Python 2.7, and no one
needs to do anything.


> What I'm trying to do is
> provide a painless (or, at least a less painful) path forward for all
> those existing Mailman sites that don't want to deal with all the same
> issues that are appearing over on the MM3-users list and in #mailman.


Forward to where?

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-09-17 at 07:13 -0700, Mark Sapiro wrote:
> On 9/17/20 6:54 AM, Matthew Pounsett wrote:
> > If someone was going to undertake a rewrite of Postorius, using a different
> > web development framework (e.g. Flask, but pretty much anything that isn't
> > Django) would at least remove one major moving part from the install
> > process.
> 
> I have said multiple times that Postorius and HyperKitty are just
> examples and are part of Mailman 3 because we need something and that's
> what we've got, and also that efforts to port Mailman 2.1 to Python 3 or
> add new features to Mailman 2.1 would be better spent building a
> lightweight (e.g. Flask based) web UI to manage Mailman 3 via its REST API.

Would it though?  Is that conjecture or based on available data that can
be analyzed?  Here's my POV, if mm2 can (and it appears to me that it
can somewhat easily) be fixed to use py3 then all the installed bases of
mm2 don't have to learn/deal/secure/test/manage/deal with a REST API
and/or Flask, etc.  All those current mm2 admins get to continue life as
they normally do.  They save a weekend (or a month in some cases) and
some even save some $$, by not having to significantly change their
Mailman installation or server size, etc.  What I'm trying to do is
provide a painless (or, at least a less painful) path forward for all
those existing Mailman sites that don't want to deal with all the same
issues that are appearing over on the MM3-users list and in #mailman.

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Brian Carpenter

On 9/17/20 9:54 AM, Matthew Pounsett wrote:

If someone was going to undertake a rewrite of Postorius, using a different
web development framework (e.g. Flask, but pretty much anything that isn't
Django) would at least remove one major moving part from the install
process.


We went with Laravel (PHP) when we replaced Postorius with our Affinity. 
It's not python but we didn't want to use a python framework.


FYI, here is a decent comparison of Django vs Flask:

https://hackr.io/blog/flask-vs-django

In the article, this was said:

"Django is suited for bigger projects that need a lot of functionality. 
For simpler projects, the features might be an overdose"


Do you think Mailman 3 would be considered a "bigger project" that needs 
a lot of functionality?


--
Brian Carpenter
Harmonylists.com
Emwd.com

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Mark Sapiro
On 9/17/20 7:20 AM, Matthew Pounsett wrote:
> 
> Yep.  Sorry, that wasn't meant to sound like criticism ...


And it wasn't taken as such. I'm only trying to reinforce the idea that
there are opportunities for making a different MM 3 web UI that would be
less complex to install, and working on that would be a valuable and
worthwhile effort.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Matthew Pounsett
On Thu, 17 Sep 2020 at 10:14, Mark Sapiro  wrote:

> On 9/17/20 6:54 AM, Matthew Pounsett wrote:
> >
> > If someone was going to undertake a rewrite of Postorius, using a
> different
> > web development framework (e.g. Flask, but pretty much anything that
> isn't
> > Django) would at least remove one major moving part from the install
> > process.
>
> I have said multiple times that Postorius and HyperKitty are just
> examples and are part of Mailman 3 because we need something and that's
> what we've got, and also that efforts to port Mailman 2.1 to Python 3 or
> add new features to Mailman 2.1 would be better spent building a
> lightweight (e.g. Flask based) web UI to manage Mailman 3 via its REST API.
>

Yep.  Sorry, that wasn't meant to sound like criticism ... while it's never
appealed to me personally, obviously Django has its uses or people wouldn't
use it.   I was just responding to Stephen's comment about the
perceived complexity of setting up MM3.  Not having to install and
configure another application would be, objectively, simpler.

I already have too many full time jobs, so I'm not in a position to
volunteer to take on another. :)
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Mark Sapiro
On 9/17/20 6:54 AM, Matthew Pounsett wrote:
> 
> If someone was going to undertake a rewrite of Postorius, using a different
> web development framework (e.g. Flask, but pretty much anything that isn't
> Django) would at least remove one major moving part from the install
> process.


I have said multiple times that Postorius and HyperKitty are just
examples and are part of Mailman 3 because we need something and that's
what we've got, and also that efforts to port Mailman 2.1 to Python 3 or
add new features to Mailman 2.1 would be better spent building a
lightweight (e.g. Flask based) web UI to manage Mailman 3 via its REST API.

This is exactly the motivation for the separation of the core engine
from the web UI in Mailman 3.

Brian has actually done this with Affinity and Empathy, but because of
his legitimate business interests, these are only available via his
hosting services.

I would welcome and support anyone who wants to develop a lightweight,
pythonic web UI for Mailman 3 list management and/or archiving and make
it available to the community.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Matthew Pounsett
On Thu, 17 Sep 2020 at 07:22, Stephen J. Turnbull <
turnbull.stephen...@u.tsukuba.ac.jp> wrote:

>
> Replacing Postorius with a Mailman 2 lookalike would probabaly be a
> nearly complete rewrite.  Of course you can reuse the HTML and perhaps
> the page-generating code, but all of the "business logic" needs to be
> rewritten pretty much from scratch, as Mailman 2 has direct access to
> list configurations, but in Mailman 3 you need to talk REST.
>
> I'm not sure this would be easier to install, although the typical
> installation / configuration problems might be more familiar to
> Mailman 2 users.
>

If someone was going to undertake a rewrite of Postorius, using a different
web development framework (e.g. Flask, but pretty much anything that isn't
Django) would at least remove one major moving part from the install
process.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Stephen J. Turnbull
Cleaned up the @s.

Jonathan M writes:

 > What would be fun is a “Mailman 2 lookalike” Python 3 user
 > interface for Mailman 3, complete with Times New Roman and Courier.

The archiver part would be relatively easy to do; Pipermail is
probably fairly easy to disentangle from Mailman 2.  I can't speak to
how easy it would be to translate to Python 3.

Replacing Postorius with a Mailman 2 lookalike would probabaly be a
nearly complete rewrite.  Of course you can reuse the HTML and perhaps
the page-generating code, but all of the "business logic" needs to be
rewritten pretty much from scratch, as Mailman 2 has direct access to
list configurations, but in Mailman 3 you need to talk REST.

I'm not sure this would be easier to install, although the typical
installation / configuration problems might be more familiar to
Mailman 2 users.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-09-17 at 18:47 +0900, Stephen J. Turnbull wrote:
> Jim Popovitch via Mailman-Users writes:
>  > On Thu, 2020-09-17 at 02:34 +0900, Stephen J. Turnbull wrote:
> 
>  > > You don't need to have a title, an @mailman email address, or a commit 
> bit
>  > > to do any of that.
>  > > 
>  > > You just do it.
>  > 
>  > Exactly!  But that is not really what this convo is all about.
> 
> No, that is *all* this conversation is about.  You need to persuade us
> to give you what you want.  If you don't speak to our interests, you
> won't get it.
> 
>  > You keep taking it into the "end user support" arena, I'm focused
>  > on product preservation.
> 
> I care very little about product preservation for Mailman 2 (it's
> complete subordinate to user service in the sense that it would be a
> nice to have if there's zero risk to user support), and you need
> *nothing* from us to do it, anyway.
> 
> Pragmatically, users are *all* I care about in the Mailman 2 world.
> And I'm quite sure that's what the rest of GNU Mailman (the software
> development project) thinks, too.  Note well: I am not their elected
> representative, but I believe my statements are generally
> representative of their beliefs about the user base and their values.
> If you think otherwise, get in touch with them off list, since they
> aren't posting that I'm full of nonsense on list (ie, maybe they're
> just not listening here).
> 
>  > There are multiple roles, as you well know, why do you feel I need
>  > to fit in the role you define for me?
> 
> You don't need to fit into any role in the Mailman project.  You have
> the code, you have access to Launchpad or Github or Gitlab or
> SourceForge, and you have and will have access to this mailing list.
> 
> But if you don't care about users, you're not part of the team.
> You're a lone ranger.
> 
>  > Who's users?  ;-)
> 
> The Mailman Project's users, and in particular subscribers and admins
> of Mailman 2 sites and lists.
> 
>  > I think, based on this thread, you are going to have a really tough
>  > time ever retiring from Mailman.
> 
> From "Mailman"?  Not even envisioned at present, except in the sense
> that I'm old enough to be aware of my own impending death being closer
> to me than my birth.
> 
> From *Mailman 2*?  No problem at all.  This is not my first rodeo, my
> friend.  You clearly do not understand what I've been saying about the
> costs and benefits of user support and why GNU Mailman has chosen the
> development and user support strategies we have.
> 
> I'm not saying you should agree.  Certainly not that you should
> abandon your own interests.  But you seem to have a completely
> unrealistic idea of how things work in open source and how you could
> get at least some of what you want in this particular case.
> 
>  > > "Manage just the new features" sounds like a terrible deal for the
>  > > vast majority of admins and subscribers, and a very bad look for GNU
>  > > Mailman.
> 
>  > Let GNU Mailman, the FSF, and the Mailman community decide that and
>  > don't prevent them from deciding that.
> 
> Have a clue, Jim.  Really.  Abhilash, Mark, I, and several others
> *are* GNU Mailman -- there's nothing else it *could* be.  The FSF has
> nothing to do with decisions about what code we distribute, that's not
> what GNU is about.  The Mailman community is *not* going to be part of
> the decision-making process, except that a small, unrepresentative
> sample of individual community members post here, and GNU Mailman is
> listening to them.  And in fact, there will not even be a decision in
> some sense.  That is, we could lift the feature freeze at any future
> date, and then we could reverse that decision afterward.
> 
> As for me preventing anything, I can't prevent anything -- if it's at
> all a close call, Abhilash will decide -- and I am not trying to do
> so.  I am *advocating* that
> 
> 1. the current feature freeze is, on balance, *good* for the community
>as a whole even though there's a very vocal group (I take it on
>faith that you're not the only one ;-) that wants the freeze
>lifted, and
> 
> 2. that lifting the freeze *as proposed on this list* is *not* in the
>interest of GNU Mailman or the community
> 
> and I am stating that
> 
> 3. due to my own preferences and constraints, I will retire from
>Mailman 2 support if I don't get credible assurances that Mark and
>I will get substantial help with user support to offset the likely
>increase in needs, and to ensure that user support is maintained at
>high levels even as we reduce our commitments as currently planned.
> 

Stephen, I"m just going to say that your input is always appreciated and
welcome, whether you continue to support mm2 or not.  Best wishes buddy.

-Jim P.

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org

[Mailman-Users] Re: mailman v2.x

2020-09-17 Thread Stephen J. Turnbull
Jim Popovitch via Mailman-Users writes:
 > On Thu, 2020-09-17 at 02:34 +0900, Stephen J. Turnbull wrote:

 > > You don't need to have a title, an @mailman email address, or a commit bit
 > > to do any of that.
 > > 
 > > You just do it.
 > 
 > Exactly!  But that is not really what this convo is all about.

No, that is *all* this conversation is about.  You need to persuade us
to give you what you want.  If you don't speak to our interests, you
won't get it.

 > You keep taking it into the "end user support" arena, I'm focused
 > on product preservation.

I care very little about product preservation for Mailman 2 (it's
complete subordinate to user service in the sense that it would be a
nice to have if there's zero risk to user support), and you need
*nothing* from us to do it, anyway.

Pragmatically, users are *all* I care about in the Mailman 2 world.
And I'm quite sure that's what the rest of GNU Mailman (the software
development project) thinks, too.  Note well: I am not their elected
representative, but I believe my statements are generally
representative of their beliefs about the user base and their values.
If you think otherwise, get in touch with them off list, since they
aren't posting that I'm full of nonsense on list (ie, maybe they're
just not listening here).

 > There are multiple roles, as you well know, why do you feel I need
 > to fit in the role you define for me?

You don't need to fit into any role in the Mailman project.  You have
the code, you have access to Launchpad or Github or Gitlab or
SourceForge, and you have and will have access to this mailing list.

But if you don't care about users, you're not part of the team.
You're a lone ranger.

 > Who's users?  ;-)

The Mailman Project's users, and in particular subscribers and admins
of Mailman 2 sites and lists.

 > I think, based on this thread, you are going to have a really tough
 > time ever retiring from Mailman.

>From "Mailman"?  Not even envisioned at present, except in the sense
that I'm old enough to be aware of my own impending death being closer
to me than my birth.

>From *Mailman 2*?  No problem at all.  This is not my first rodeo, my
friend.  You clearly do not understand what I've been saying about the
costs and benefits of user support and why GNU Mailman has chosen the
development and user support strategies we have.

I'm not saying you should agree.  Certainly not that you should
abandon your own interests.  But you seem to have a completely
unrealistic idea of how things work in open source and how you could
get at least some of what you want in this particular case.

 > > "Manage just the new features" sounds like a terrible deal for the
 > > vast majority of admins and subscribers, and a very bad look for GNU
 > > Mailman.

 > Let GNU Mailman, the FSF, and the Mailman community decide that and
 > don't prevent them from deciding that.

Have a clue, Jim.  Really.  Abhilash, Mark, I, and several others
*are* GNU Mailman -- there's nothing else it *could* be.  The FSF has
nothing to do with decisions about what code we distribute, that's not
what GNU is about.  The Mailman community is *not* going to be part of
the decision-making process, except that a small, unrepresentative
sample of individual community members post here, and GNU Mailman is
listening to them.  And in fact, there will not even be a decision in
some sense.  That is, we could lift the feature freeze at any future
date, and then we could reverse that decision afterward.

As for me preventing anything, I can't prevent anything -- if it's at
all a close call, Abhilash will decide -- and I am not trying to do
so.  I am *advocating* that

1. the current feature freeze is, on balance, *good* for the community
   as a whole even though there's a very vocal group (I take it on
   faith that you're not the only one ;-) that wants the freeze
   lifted, and

2. that lifting the freeze *as proposed on this list* is *not* in the
   interest of GNU Mailman or the community

and I am stating that

3. due to my own preferences and constraints, I will retire from
   Mailman 2 support if I don't get credible assurances that Mark and
   I will get substantial help with user support to offset the likely
   increase in needs, and to ensure that user support is maintained at
   high levels even as we reduce our commitments as currently planned.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-16 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-09-17 at 02:34 +0900, Stephen J. Turnbull wrote:
> 
> You're right.  If we're going to reopen the Mailman 2 branch to new
> features, there should be a much larger body.  So where is it?  Mark
> and I are not special.  We're merely here every day, we have acquired
> a lot of knowledge about common issues, and we dig into the code or
> the user's configuration when that's needed to solve a problem.  

You're not alone in that, there are plenty of people who help out. Are
you one of the more prevalent this month? Sure!  Last month, not so much
(according to my email archive), etc.  People do what they can, when
they can.

> You don't need to have a title, an @mailman email address, or a commit bit
> to do any of that.
> 
> You just do it.

Exactly!  But that is not really what this convo is all about.  You keep
taking it into the "end user support" arena, I'm focused on product
preservation.  There are multiple roles, as you well know, why do you
feel I need to fit in the role you define for me?

> It's *easy* to learn to support users, at least the relatively
> sophisticated, often service-oriented admins we see on most days.  So
> where are the folks who "just do it" and show day-to-day attachment to
> supporting other users?
>
> Bottom line: When do we get to retire?  What happens to our *users*
> when we do?  Eventually (ie, within 3 years or so) that *is* going to
> happen.  What are you going to do for our users?

Who's users?  ;-)  I think, based on this thread, you are going to have 
a really tough time ever retiring from Mailman.  I think, and I mean
this with love and appreciation, you are extremely protective of
something you've shepherded.  Like a parent who is offended by a teacher
or professor criticizing their child.

> "Manage just the new features" sounds like a terrible deal for the
> vast majority of admins and subscribers, and a very bad look for GNU
> Mailman.

Let GNU Mailman, the FSF, and the Mailman community decide that and
don't prevent them from deciding that.

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-16 Thread Stephen J. Turnbull
Jim Popovitch via Mailman-Users writes:

 > Wait, so you do want to continue to support mm2 users, but you don't
 > want to support them in any fashion if someone else other than you and
 > Mark manages just the new features?

That's right.

Currently Mark and I have a tolerable balance between the burden of
work that is intrinsically not very rewarding, the value that we get
from serving our users, and the knowledge that the burden is steadily
decreasing.  That decrease depends on the feature freeze.

You propose to remove the freeze, and indeed suggest that Mailman 2
even has a long-term growth story via rewriting in Python 3.  I am not
signed up for a slower decline in the user base, let alone growth, and
I think it's safe to say neither is Mark.

Here's the problem.

 > I think the genuine problem here is that it's a 2 man show when it
 > should be a much larger body.

You're right.  If we're going to reopen the Mailman 2 branch to new
features, there should be a much larger body.  So where is it?  Mark
and I are not special.  We're merely here every day, we have acquired
a lot of knowledge about common issues, and we dig into the code or
the user's configuration when that's needed to solve a problem.  You
don't need to have a title, an @mailman email address, or a commit bit
to do any of that.

You just do it.

It's *easy* to learn to support users, at least the relatively
sophisticated, often service-oriented admins we see on most days.  So
where are the folks who "just do it" and show day-to-day attachment to
supporting other users?

Bottom line: When do we get to retire?  What happens to our *users*
when we do?  Eventually (ie, within 3 years or so) that *is* going to
happen.  What are you going to do for our users?

"Manage just the new features" sounds like a terrible deal for the
vast majority of admins and subscribers, and a very bad look for GNU
Mailman.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-16 Thread Jonathan M

> On 16 Sep 2020, at 07:07, Barry Warsaw  wrote:
> 
> I think that will be pretty challenging actually.  At least, it was when I 
> did it years ago.  And unless you’re *really* careful to avoid the temptation 
> to “fix" things along the way, you’ll probably end up with something not too 
> far away from Mailman 3. ;)   But hey, it’ll definitely be fun.


What would be fun is a “Mailman 2 lookalike” Python 3 user interface for 
Mailman 3, complete with Times New Roman and Courier.

An easier-to-install interface could open up Mailman 3 to the old audience. 

Best wishes

Jonathan  

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-16 Thread Barry Warsaw
I admit I haven’t been following this thread very closely, and don’t intend to 
do so.  (There’s a reason I turned over project management a few years ago :).

Just a couple of points.

> On Sep 15, 2020, at 18:11, Brian Carpenter  wrote:
> 
> When you say py3, are you talking about python 3? Are you trying to make mm2 
> python 3 compatible?

I think that will be pretty challenging actually.  At least, it was when I did 
it years ago.  And unless you’re *really* careful to avoid the temptation to 
“fix" things along the way, you’ll probably end up with something not too far 
away from Mailman 3. ;)   But hey, it’ll definitely be fun.

The only other point to make is to remember that Mailman is “GNU Mailman”.  2 
or 3, it’s still a GNU project, which means more than just being covered under 
some flavor of the GPL.  Just saying that if responsibility for MM2 is 
transferred, you’ll need to coordinate with the GNU project.

Cheers, and good luck!
-Barry




signature.asc
Description: Message signed with OpenPGP
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Jim Popovitch via Mailman-Users
On Tue, 2020-09-15 at 21:11 -0400, Brian Carpenter wrote:
> On 9/15/20 8:18 PM, Jim Popovitch via Mailman-Users wrote:
> > A small group, including myself, are planning to present a proposal.  We
> > are in the early stage of defining what that will involve, but we are
> > all committed.  I've also, as you've probably seen on lp, been focused
> > on pushing my py3 changes for mm2 to get them to the point of usable
> > testing.  I'm not anti-mm3 but myself and some others certainly do see
> > the ongoing need for a MLM like mm2.
> 
> When you say py3, are you talking about python 3? Are you trying to make 
> mm2 python 3 compatible?

yes.

> 
> So this labor you and your group are looking to do for MM2, how is this 
> not going to take more time then just migrating to MM3? One of your 
> criticism is that MM3 is complex and it is difficult to install. How is 
> all of this effort you are making staying with a version of Mailman that 
> has been updated (MM2 to MM3), and uses an interface that is over 15 
> years old productive? 

How old is the technology and tools used to steer the vehicle you drive,
or the mechanics behind the blades that wipe the windshield?

> I don't see this path you are trying to take as 
> one that is less complex and difficult than just moving to a MM3 
> environment. 

Fair point.

> At this point, those who use MM2 via cPanel will most 
> likely not benefit from your efforts. Especially if you port MM2 to 
> python 3 (this is an assumption I am making). I don't think cPanel will 
> touch such a version at all.

I'm no fan of cpanel as I have stated many times before. This isn't for
them.

> By the way, with all the problems I have seen with some folks having a 
> difficult time with installing MM2 on this list, I think the arguments 
> that MM3 is too difficult to install (it's not) 

says the guy who paid someone to re-craft 2/3rds of it. O_o   :)


> weakens considerably. I 
> still think non-cPanel MM2 users' time is better spent learning to 
> install MM3 and using it. Or better yet use a Mailman 3 host provider 
> such as myself to make their lives considerably easier.
> 

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Brian Carpenter

On 9/15/20 8:18 PM, Jim Popovitch via Mailman-Users wrote:

A small group, including myself, are planning to present a proposal.  We
are in the early stage of defining what that will involve, but we are
all committed.  I've also, as you've probably seen on lp, been focused
on pushing my py3 changes for mm2 to get them to the point of usable
testing.  I'm not anti-mm3 but myself and some others certainly do see
the ongoing need for a MLM like mm2.


When you say py3, are you talking about python 3? Are you trying to make 
mm2 python 3 compatible?


So this labor you and your group are looking to do for MM2, how is this 
not going to take more time then just migrating to MM3? One of your 
criticism is that MM3 is complex and it is difficult to install. How is 
all of this effort you are making staying with a version of Mailman that 
has been updated (MM2 to MM3), and uses an interface that is over 15 
years old productive? I don't see this path you are trying to take as 
one that is less complex and difficult than just moving to a MM3 
environment. At this point, those who use MM2 via cPanel will most 
likely not benefit from your efforts. Especially if you port MM2 to 
python 3 (this is an assumption I am making). I don't think cPanel will 
touch such a version at all.


By the way, with all the problems I have seen with some folks having a 
difficult time with installing MM2 on this list, I think the arguments 
that MM3 is too difficult to install (it's not) weakens considerably. I 
still think non-cPanel MM2 users' time is better spent learning to 
install MM3 and using it. Or better yet use a Mailman 3 host provider 
such as myself to make their lives considerably easier.


--
Brian Carpenter
Harmonylists.com
Emwd.com

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Jim Popovitch via Mailman-Users
On Tue, 2020-09-15 at 16:51 -0700, Mark Sapiro wrote:
> On 9/15/20 12:41 PM, Jim Popovitch via Mailman-Users wrote:
> > I demanded nothing. I was told by Mark that I would need to apply for
> > all those perks (sans the Cabal seat) when all I offered to do was
> > support/test/debug/evaluate/approve new features in launchpad. 
> 
> I told you to make a proposal to mailman-ca...@python.org. I suggested
> what I thought it should include. I don't think I said it had to include
> all that. See my follow=up at
> ;.
> 

Thank you Mark.  I did read your followup when you posted a few days
back, I've read and followed every email in this thread.

A small group, including myself, are planning to present a proposal.  We
are in the early stage of defining what that will involve, but we are
all committed.  I've also, as you've probably seen on lp, been focused
on pushing my py3 changes for mm2 to get them to the point of usable
testing.  I'm not anti-mm3 but myself and some others certainly do see
the ongoing need for a MLM like mm2.

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Mark Sapiro
On 9/15/20 8:59 AM, Jim Popovitch via Mailman-Users wrote:
> 
> I went to the last link at the bottom of this list's posts and clicked
> on the (first) item with the same Subject as this email.  I paged down
> into that long page to find the single post that I wanted to link to.
> After a while I gave up trying to find it because I was distracted by
> all the out-of-order posts that were displayed there.  Go try it
> yourself, look at how the past post of "I'm done Jim" is listed right
> after your most recent post today.  I get that HK is different than
> Pipermail, but there's something stylish and simplistic about Pipermail
> that make it easy to use.


I admit, it isn't easy to find a single post on a page containing over
80 posts, but you might find it easier to "Search this list" for
"mailman v2.x" and "sort by latest first, or use your browser's find in
page function.

It doesn't seem that difficult for me if I know what I'm looking for.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Mark Sapiro
On 9/15/20 12:41 PM, Jim Popovitch via Mailman-Users wrote:
> 
> I demanded nothing. I was told by Mark that I would need to apply for
> all those perks (sans the Cabal seat) when all I offered to do was
> support/test/debug/evaluate/approve new features in launchpad. 


I told you to make a proposal to mailman-ca...@python.org. I suggested
what I thought it should include. I don't think I said it had to include
all that. See my follow=up at
.


-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Brian Carpenter

On 9/15/20 4:39 PM, Chip Davis wrote:
If only this were a meeting conducted under Robert's Rules, the Chair 
would have invoked cloture, or at least referred this issue back to 
committee.  All interested parties have made their arguments, 
positions have hardened, and debate has become unrevealing.


Insofar as anything ever dies on the Internet, this abused equine is 
pinin' for the grassy fjords.


Please, can we convert this into a three-way private conversation, and 
consign this nearly ninety-entry email thread to history?  My screen 
isn't wide enough to handle the indentation required. 


Please don't make this private. Chip doesn't have to read it. That is 
why email programs contain a delete button.


--
Please let me know if you need further assistance.

Thank you for your business. We appreciate our clients.
Brian Carpenter
EMWD.com

--
EMWD's Knowledgebase:
https://clientarea.emwd.com/index.php/knowledgebase

EMWD's Community Forums
http://discourse.emwd.com/

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Chip Davis
If only this were a meeting conducted under Robert's Rules, the Chair 
would have invoked cloture, or at least referred this issue back to 
committee.  All interested parties have made their arguments, 
positions have hardened, and debate has become unrevealing.


Insofar as anything ever dies on the Internet, this abused equine is 
pinin' for the grassy fjords.


Please, can we convert this into a three-way private conversation, and 
consign this nearly ninety-entry email thread to history?  My screen 
isn't wide enough to handle the indentation required.


-Chip-

On 9/15/2020 3:41 PM, Jim Popovitch via Mailman-Users wrote:

On Wed, 2020-09-16 at 03:51 +0900, Stephen J. Turnbull wrote:

Jim Popovitch via Mailman-Users writes:

  > I personally think that you, Stephen, are digging high and low to find
  > any reason for Mailman2 to not continue forward under the Mailman
  > umbrella.

Digging??  Wake up, Jim!  It's *official policy* that Mailman 2 will
not receive new features under the Mailman umbrella.  It has been so
for *years*.  And the reasons have been the same for just as long:
It's because we don't want to support them.  Mark and I have both been
quite clear about that.

If you will support Mailman 2 going forward as we (ie, mostly Mark)
have supported it to date, that would be fine.  But you've explicitly
denied that you want to do that work.  You don't think it's necessary.
We think it addresses the needs of the users who need us most, so
we'll keep doing it our way, ie, we will support no new features.

Wait, so you do want to continue to support mm2 users, but you don't
want to support them in any fashion if someone else other than you and
Mark manages just the new features? (BTW, NEWS lists New Features were
added as recently as 2020-April) Do you feel that you would be obligated
to support something that was added to mm2 that you didn't feel should
be added or that you couldn't provide support for?  Is that what this is
all about?



  > Obstruction much?

There you go with the abuse again.  But I'll answer you politely.

Mailman is free software.  There's no "obstruction" at all, it's
almost impossible to obstruct you -- you have the code, it's easy to
find well-known places to host your releases and issue tracker, and
we're not going to stop you from announcing them here or on the wiki.
You don't need anything else.

You demand a bunch of perks: use of the Mailman brand, commit rights
in the official Mailman 2 repository, manager access to the tracker (I
assume), a seat in the cabal, etc.

I demanded nothing. I was told by Mark that I would need to apply for
all those perks (sans the Cabal seat) when all I offered to do was
support/test/debug/evaluate/approve new features in launchpad.


You also apparently think you have
the right to tell Mark and me which releases we should support.

No I don't, and I don't know why you can't differentiate between Mailman
and yourself.  Mailman should, and can, support multiple versions.  You
and Mark should feel free to contribute wherever you feel comfortable;
but I draw the line at you saying mm2 should die because you don't want
to support it under the parameters and guidelines designed and
established by yourself (and Mark).  I think the genuine problem here is
that it's a 2 man show when it should be a much larger body.

Now, no one should be shielded from criticism when they attempt to
abandon an installed base of users.  Remember, we are at this juncture
today because several people spoke up, over the past year, about all the
repeated "Final Release" warnings. It took at least 2 days of back-n-
forth emails just to get someone to say publicly that mm2 security
issues would indeed still be addressed going forward (why was it so
difficult to come to that reasoning?).   Also, don't forget that this
time last Summer there were some discussions on this list about how mm2
would be eol on 1/1/2020 because that was the Python team's v2 eol.


My question is: what do our users get in return?  If they wanted "bright!
new! shiny!", they'd migrate to Mailman 3.  I don't see much in the
plus column.  On the minus side, Mark and I will spend time supporting
your new features, time we can't spend on "classic" Mailman 2 issues,
Python 2 EOL issues, or on Mailman 3 development, which is what the
project is committed to, as Mark and I are.

I don't see that as a good deal for Mark and me, or for the great
majority of Mailman 2 users.

Why just you and Mark?  What about any of the other many people who
contribute and help in various ways?

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
 

[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Jim Popovitch via Mailman-Users
On Wed, 2020-09-16 at 03:51 +0900, Stephen J. Turnbull wrote:
> Jim Popovitch via Mailman-Users writes:
> 
>  > I personally think that you, Stephen, are digging high and low to find
>  > any reason for Mailman2 to not continue forward under the Mailman
>  > umbrella.
> 
> Digging??  Wake up, Jim!  It's *official policy* that Mailman 2 will
> not receive new features under the Mailman umbrella.  It has been so
> for *years*.  And the reasons have been the same for just as long:
> It's because we don't want to support them.  Mark and I have both been
> quite clear about that.
> 
> If you will support Mailman 2 going forward as we (ie, mostly Mark)
> have supported it to date, that would be fine.  But you've explicitly
> denied that you want to do that work.  You don't think it's necessary.
> We think it addresses the needs of the users who need us most, so
> we'll keep doing it our way, ie, we will support no new features.

Wait, so you do want to continue to support mm2 users, but you don't
want to support them in any fashion if someone else other than you and
Mark manages just the new features? (BTW, NEWS lists New Features were
added as recently as 2020-April) Do you feel that you would be obligated
to support something that was added to mm2 that you didn't feel should
be added or that you couldn't provide support for?  Is that what this is
all about?  


>  > Obstruction much?
> 
> There you go with the abuse again.  But I'll answer you politely.
> 
> Mailman is free software.  There's no "obstruction" at all, it's
> almost impossible to obstruct you -- you have the code, it's easy to
> find well-known places to host your releases and issue tracker, and
> we're not going to stop you from announcing them here or on the wiki.
> You don't need anything else.
> 
> You demand a bunch of perks: use of the Mailman brand, commit rights
> in the official Mailman 2 repository, manager access to the tracker (I
> assume), a seat in the cabal, etc.  

I demanded nothing. I was told by Mark that I would need to apply for
all those perks (sans the Cabal seat) when all I offered to do was
support/test/debug/evaluate/approve new features in launchpad. 

> You also apparently think you have
> the right to tell Mark and me which releases we should support.

No I don't, and I don't know why you can't differentiate between Mailman
and yourself.  Mailman should, and can, support multiple versions.  You
and Mark should feel free to contribute wherever you feel comfortable;
but I draw the line at you saying mm2 should die because you don't want
to support it under the parameters and guidelines designed and
established by yourself (and Mark).  I think the genuine problem here is
that it's a 2 man show when it should be a much larger body.

Now, no one should be shielded from criticism when they attempt to
abandon an installed base of users.  Remember, we are at this juncture
today because several people spoke up, over the past year, about all the
repeated "Final Release" warnings. It took at least 2 days of back-n-
forth emails just to get someone to say publicly that mm2 security
issues would indeed still be addressed going forward (why was it so
difficult to come to that reasoning?).   Also, don't forget that this
time last Summer there were some discussions on this list about how mm2
would be eol on 1/1/2020 because that was the Python team's v2 eol. 

> My question is: what do our users get in return?  If they wanted "bright! 
> new! shiny!", they'd migrate to Mailman 3.  I don't see much in the
> plus column.  On the minus side, Mark and I will spend time supporting
> your new features, time we can't spend on "classic" Mailman 2 issues,
> Python 2 EOL issues, or on Mailman 3 development, which is what the
> project is committed to, as Mark and I are.
> 
> I don't see that as a good deal for Mark and me, or for the great
> majority of Mailman 2 users.

Why just you and Mark?  What about any of the other many people who
contribute and help in various ways? 

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Stephen J. Turnbull
Jim Popovitch via Mailman-Users writes:

 > I personally think that you, Stephen, are digging high and low to find
 > any reason for Mailman2 to not continue forward under the Mailman
 > umbrella.

Digging??  Wake up, Jim!  It's *official policy* that Mailman 2 will
not receive new features under the Mailman umbrella.  It has been so
for *years*.  And the reasons have been the same for just as long:
It's because we don't want to support them.  Mark and I have both been
quite clear about that.

If you will support Mailman 2 going forward as we (ie, mostly Mark)
have supported it to date, that would be fine.  But you've explicitly
denied that you want to do that work.  You don't think it's necessary.
We think it addresses the needs of the users who need us most, so
we'll keep doing it our way, ie, we will support no new features.

 > Obstruction much?

There you go with the abuse again.  But I'll answer you politely.

Mailman is free software.  There's no "obstruction" at all, it's
almost impossible to obstruct you -- you have the code, it's easy to
find well-known places to host your releases and issue tracker, and
we're not going to stop you from announcing them here or on the wiki.
You don't need anything else.

You demand a bunch of perks: use of the Mailman brand, commit rights
in the official Mailman 2 repository, manager access to the tracker (I
assume), a seat in the cabal, etc.  You also apparently think you have
the right to tell Mark and me which releases we should support.  My
question is: what do our users get in return?  If they wanted "bright! 
new! shiny!", they'd migrate to Mailman 3.  I don't see much in the
plus column.  On the minus side, Mark and I will spend time supporting
your new features, time we can't spend on "classic" Mailman 2 issues,
Python 2 EOL issues, or on Mailman 3 development, which is what the
project is committed to, as Mark and I are.

I don't see that as a good deal for Mark and me, or for the great
majority of Mailman 2 users.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Brian Carpenter

On 9/15/20 11:59 AM, Jim Popovitch via Mailman-Users wrote:

Ok, that makes sense. I wonder if we can get him to license/allow a copy
for use by Python.org.


Only if they agree to use it on a server on my network with no root 
access allowed. Since Affinity and Empathy are not python apps, I doubt 
they would ever agree to that, especially since Postorius and HK are 
developed with python, howbeit Django projects.




I went to the last link at the bottom of this list's posts and clicked
on the (first) item with the same Subject as this email.  I paged down
into that long page to find the single post that I wanted to link to.
After a while I gave up trying to find it because I was distracted by
all the out-of-order posts that were displayed there.  Go try it
yourself, look at how the past post of "I'm done Jim" is listed right
after your most recent post today.  I get that HK is different than
Pipermail, but there's something stylish and simplistic about Pipermail
that make it easy to use.


I am not sure if Empathy would be any better but feel free to try:

https://harmonylists.io/empathy/list/affinity-beta.harmonylists.io

--
Please let me know if you need further assistance.

Thank you for your business. We appreciate our clients.
Brian Carpenter
EMWD.com

--
EMWD's Knowledgebase:
https://clientarea.emwd.com/index.php/knowledgebase

EMWD's Community Forums
http://discourse.emwd.com/

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Jim Popovitch via Mailman-Users
On Tue, 2020-09-15 at 08:45 -0700, Mark Sapiro wrote:
> On 9/15/20 4:40 AM, Jim Popovitch via Mailman-Users wrote:
> > I'd use the new MM3 archive of this list to link to your posts, but
> > interacting with it is an abysmal time waste.  At a minimum someone
> > should put Brian's HK replacement on python.org?
> 
> Brian's Affinity and Empathy are his proprietary work and he has valid
> reasons for not licensing their use by others.

Ok, that makes sense. I wonder if we can get him to license/allow a copy
for use by Python.org.

> Would you care to elaborate on why you think interacting with HK is "an
> abysmal time waste"?

I went to the last link at the bottom of this list's posts and clicked
on the (first) item with the same Subject as this email.  I paged down
into that long page to find the single post that I wanted to link to.
After a while I gave up trying to find it because I was distracted by
all the out-of-order posts that were displayed there.  Go try it
yourself, look at how the past post of "I'm done Jim" is listed right
after your most recent post today.  I get that HK is different than
Pipermail, but there's something stylish and simplistic about Pipermail
that make it easy to use.

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Mark Sapiro
On 9/15/20 4:40 AM, Jim Popovitch via Mailman-Users wrote:
> 
> I'd use the new MM3 archive of this list to link to your posts, but
> interacting with it is an abysmal time waste.  At a minimum someone
> should put Brian's HK replacement on python.org?


Brian's Affinity and Empathy are his proprietary work and he has valid
reasons for not licensing their use by others.

Would you care to elaborate on why you think interacting with HK is "an
abysmal time waste"?

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Jim Popovitch via Mailman-Users
On Tue, 2020-09-15 at 16:10 +0900, Stephen J. Turnbull wrote:
> Jim Popovitch via Mailman-Users writes:
> 
>  > See Stephens previous comments about how there was no way he could
>  > or would work with anyone working on mm2 because it was against his
>  > objectives,
> 
> Correction: I will not work with someone who repeatedly misrepresents my
> positions in the way that the quoted passage does.


Fine. I'll leave it up to the reader to bisect what you and I have both
said on the issue, including your other comments today about how you (a
member of the Mailman Cabal) will only support Mark's Mailman releases.

I personally think that you, Stephen, are digging high and low to find
any reason for Mailman2 to not continue forward under the Mailman
umbrella.  Obstruction much?

I'd use the new MM3 archive of this list to link to your posts, but
interacting with it is an abysmal time waste.  At a minimum someone
should put Brian's HK replacement on python.org?

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Stephen J. Turnbull
Jim Popovitch via Mailman-Users writes:

 > See Stephens previous comments about how there was no way he could
 > or would work with anyone working on mm2 because it was against his
 > objectives,

Correction: I will not work with someone who repeatedly misrepresents my
positions in the way that the quoted passage does.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Stephen J. Turnbull
Christian F Buser via Mailman-Users writes:

 > As long as cPanel bundles MM2, I need from time to time some
 > support from the real experts. And even if MM2 would not be
 > improved at all in the future, I hope that this list will stay
 > alive.

The existence of this list, and of support for Mark's releases of
Mailman 2, is not in question (subject to health of experienced
developers and users).  As long as I'm alive and well and people are
posting to this list, I will be supporting Mark's releases (even if
they're a decade old).  To the extent that people aren't posting,
there's no burden, the list will remain.

As proof of credibility, I offer the fact that during Mark's recent
vacation, I requested, received, and used moderation privilege on this
list.  And of course you know Mark.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-15 Thread Stephen J. Turnbull
Steven Jones writes:

 > I dont know what planet this user lives on,

Please, don't.  This conversation is painful enough on all sides.

 > > Speaking as _a_ user, my requirements are simple:
 > >   1.  MM2 must continue to work,
 > >   2.  support must continue to be provided."

Read literally, he said "these are *my* requirements".  That's a
perfectly fair statement!  He didn't claim there was an obligation on
the Mailman developers, nor did he say what he would do if Mark and I
decided to completely abandon MM2 support -- but I doubt it involves
putting prices on our heads. :-)

Sure, you could take it as a statement of obligation, and indeed it
often is.  I prefer to hear it as a forecast of a cry of pain, and to
do what I can (within the effort that I have committed) to deal with
it in that spirit.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-14 Thread Steven Jones
HI,

I dont know what planet this user lives on,

"> Speaking as _a_ user, my requirements are simple:
>   1.  MM2 must continue to work,
>   2.  support must continue to be provided."

but really?   try telling say Oracle that they MUST continue to support Oracle 
8.0, LOL.

This is open source there is no MUST in support.  If you think you are entitled 
to free support for ever you are using the wrong product(s).  Except as its 
open source unlike Oracle you can continue to look after it yourself.

Meanwhile thankyou Mailman team for the great product and support over 15+ 
years.


regards

Steven
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-14 Thread Dmitri Maziuk

On 9/13/2020 7:20 PM, dean.coll...@insightplanners.com wrote:

Yay! Most useless, uninformative post of the day!


Are you reading he same mailing list I do? And if yes, the follow-up 
question: did you notice the threads on getting MM2 to work on centos 7, 
RedHat 8, and did you ever stop to consider how they relate to


... the odds are I'll never 
need a "New! Improved!" MM2, or MM3.


*plonk*
Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread dean . collins

Yay! Most useless, uninformative post of the day!

Quoting Dmitri Maziuk :


On 9/13/2020 6:17 PM, Chip Davis wrote:

Ironically, I was writing in support of Mark's and Stephen's  
position on the matter.  As a member of Mark's cohort, the odds are  
I'll never need a "New! Improved!" MM2, or MM3.


You wish: at some point "they" will upgrade the hardware and/or the  
OS to fix whatever horrible security hole is ending the world as we  
know it this week, and the upgrade will kill python 2 compatibility.  
Or some obscure python 2 library nobody knew existed.


"Them" being cPanel of RedHat or Cluebuntu, or any number of other  
players who aren't Mark and Stephen.


Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/



--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Dmitri Maziuk

On 9/13/2020 6:17 PM, Chip Davis wrote:

Ironically, I was writing in support of Mark's and Stephen's position on 
the matter.  As a member of Mark's cohort, the odds are I'll never need 
a "New! Improved!" MM2, or MM3.


You wish: at some point "they" will upgrade the hardware and/or the OS 
to fix whatever horrible security hole is ending the world as we know it 
this week, and the upgrade will kill python 2 compatibility. Or some 
obscure python 2 library nobody knew existed.


"Them" being cPanel of RedHat or Cluebuntu, or any number of other 
players who aren't Mark and Stephen.


Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Chip Davis

As it turns out, as I was hitting 'Send', Christian F Buser posted:

I am just a user of a Mailman 2 installation on cPanel. And I am reading here 
because i get some answers to my questions and help if something goes wrong.

As long as cPanel bundles MM2, I need from time to time some support from the 
real experts. And even if MM2 would not be improved at all in the future, I 
hope that this list will stay alive.
... which is a much more succinct version of what I was trying to 
say.  And perhaps I should have substituted "needs" for 
"requirements", in order to avoid any intimation of a demand.  I am 
genuinely grateful for all the help I've received, primarily from 
following other admins' issues reported here.


Ironically, I was writing in support of Mark's and Stephen's position 
on the matter.  As a member of Mark's cohort, the odds are I'll never 
need a "New! Improved!" MM2, or MM3.


-Chip-

On 9/13/2020 6:00 PM, Mark Sapiro wrote:

On 9/13/20 12:39 PM, Chip Davis wrote:

Speaking as _a_ user, my requirements are simple:
   1.  MM2 must continue to work,
   2.  support must continue to be provided.

Any proposal that jeopardizes those fundamentals must be rejected.

By "support", I mean everything except new functionality: bug fixes,
installation/administration hand-holding, dumb questions not properly
answered by the user community, the occasional "Why does Mailman do
this?" query, and any number of issues that depend on the encyclopedic
institutional knowledge residing in Mark's and Stephen's crania.

This includes structural changes to way email is handled (DMARC,
encryption, etc.).  This does not include additional language tables, or
any of the issues on my personal laundry list of "I sure wish Mailman
had a way to ...".


This thread started because I refused to accept a merge request to add a
new feature, hCAPTCHA, to the subscribe form. The reason I gave was "no
new features", although I have other reservations about CAPTCHAs in general.

I think I have made my position clear and I think it includes my doing
all the things Chip wants, although I'm 78 years old, and it's not
unlikely that I will die before Mailman 2.1 finally does.

What I am opposed to is third parties making changes to the code base
and expecting me to continue to make releases, so I ask that any
potential group of Mailman 2.1 developers either fork the project in
which case, they can do whatever they want with their fork, or if they
want to commit changes to the Mailman 2.1 branch on Launchpad that they
be willing to take over the entire job.



--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Mark Sapiro
On 9/13/20 12:39 PM, Chip Davis wrote:
> 
> Speaking as _a_ user, my requirements are simple:
>   1.  MM2 must continue to work,
>   2.  support must continue to be provided.
> 
> Any proposal that jeopardizes those fundamentals must be rejected.
> 
> By "support", I mean everything except new functionality: bug fixes,
> installation/administration hand-holding, dumb questions not properly
> answered by the user community, the occasional "Why does Mailman do
> this?" query, and any number of issues that depend on the encyclopedic
> institutional knowledge residing in Mark's and Stephen's crania.
> 
> This includes structural changes to way email is handled (DMARC,
> encryption, etc.).  This does not include additional language tables, or
> any of the issues on my personal laundry list of "I sure wish Mailman
> had a way to ...".


This thread started because I refused to accept a merge request to add a
new feature, hCAPTCHA, to the subscribe form. The reason I gave was "no
new features", although I have other reservations about CAPTCHAs in general.

I think I have made my position clear and I think it includes my doing
all the things Chip wants, although I'm 78 years old, and it's not
unlikely that I will die before Mailman 2.1 finally does.

What I am opposed to is third parties making changes to the code base
and expecting me to continue to make releases, so I ask that any
potential group of Mailman 2.1 developers either fork the project in
which case, they can do whatever they want with their fork, or if they
want to commit changes to the Mailman 2.1 branch on Launchpad that they
be willing to take over the entire job.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Brian Carpenter

On 9/13/20 3:39 PM, Chip Davis wrote:
I am loathe, as a lowly list administrator (on cPanel hosts, at that) 
to participate in the clash of titans,  but this _is_ the 
"mailman-users" discussion list.  It is somewhat distressing to see so 
little participation by the Mailman2 users, who will be most affected 
by any changes in its support.


Speaking as _a_ user, my requirements are simple:
  1.  MM2 must continue to work,
  2.  support must continue to be provided.

Any proposal that jeopardizes those fundamentals must be rejected.

By "support", I mean everything except new functionality: bug fixes, 
installation/administration hand-holding, dumb questions not properly 
answered by the user community, the occasional "Why does Mailman do 
this?" query, and any number of issues that depend on the encyclopedic 
institutional knowledge residing in Mark's and Stephen's crania. 


The first line of support should come from your cPanel host and perhaps 
cPanel themselves. They made their own modifications to Mailman and with 
Mark's correct thinking on support custom modifications, cPanel should 
be supporting their version of Mailman.


--
Please let me know if you need further assistance.

Thank you for your business. We appreciate our clients.
Brian Carpenter
EMWD.com

--
EMWD's Knowledgebase:
https://clientarea.emwd.com/index.php/knowledgebase

EMWD's Community Forums
http://discourse.emwd.com/

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Chip Davis
I am loathe, as a lowly list administrator (on cPanel hosts, at that) 
to participate in the clash of titans,  but this _is_ the 
"mailman-users" discussion list.  It is somewhat distressing to see so 
little participation by the Mailman2 users, who will be most affected 
by any changes in its support.


Speaking as _a_ user, my requirements are simple:
  1.  MM2 must continue to work,
  2.  support must continue to be provided.

Any proposal that jeopardizes those fundamentals must be rejected.

By "support", I mean everything except new functionality: bug fixes, 
installation/administration hand-holding, dumb questions not properly 
answered by the user community, the occasional "Why does Mailman do 
this?" query, and any number of issues that depend on the encyclopedic 
institutional knowledge residing in Mark's and Stephen's crania.


This includes structural changes to way email is handled (DMARC, 
encryption, etc.).  This does not include additional language tables, 
or any of the issues on my personal laundry list of "I sure wish 
Mailman had a way to ...".


-Chip-

On 9/13/2020 1:06 PM, Mark Sapiro wrote:

On 9/13/20 9:29 AM, Jim Popovitch via Mailman-Users wrote:

Just what is the Cabal willing to accept in a proposal?

Try us and see?

My own opinion is I would want a commitment to take over what I
currently do including making releases on Launchpad, distributing them
to sourceforge and gnu.org, updating version info on
https://www.list.org/ (and mirrors) and announcing them. I would be
willing to mentor someone through this process.

I would ask for all that because I am not willing to make releases of
code I haven't audited, and if I were willing to audit all the changes,
we wouldn't be having this conversation at all. And, I don't see what
use there is of just updating the branch on Launchpad without making
releases.

You may have ideas about how this can work without all that. That's why
I think we want to see and discuss your proposal.



--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Christian F Buser via Mailman-Users
Hi all 

I am just a user of a Mailman 2 installation on cPanel. And I am reading here 
because i get some answers to my questions and help if something goes wrong. 

As long as cPanel bundles MM2, I need from time to time some support from the 
real experts. And even if MM2 would not be improved at all in the future, I 
hope that this list will stay alive. 

Christian 


-- 
Christian F. Buser, Hohle Gasse 6, CH-5507 Mellingen (Switzerland)  
Hilfe fuer Strassenkinder in Ghana: http://www.chance-for-children.org
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Mark Sapiro
On 9/13/20 9:29 AM, Jim Popovitch via Mailman-Users wrote:
> 
> Just what is the Cabal willing to accept in a proposal?

Try us and see?

My own opinion is I would want a commitment to take over what I
currently do including making releases on Launchpad, distributing them
to sourceforge and gnu.org, updating version info on
https://www.list.org/ (and mirrors) and announcing them. I would be
willing to mentor someone through this process.

I would ask for all that because I am not willing to make releases of
code I haven't audited, and if I were willing to audit all the changes,
we wouldn't be having this conversation at all. And, I don't see what
use there is of just updating the branch on Launchpad without making
releases.

You may have ideas about how this can work without all that. That's why
I think we want to see and discuss your proposal.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Dmitri Maziuk

On 9/13/2020 11:01 AM, Jim Popovitch via Mailman-Users wrote:


(really just who is the Cabal these days?)


There Is No Lumber Cartel.

HTH, HAND
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Jim Popovitch via Mailman-Users
On Sun, 2020-09-13 at 09:16 -0700, Mark Sapiro wrote:
> On 9/13/20 9:01 AM, Jim Popovitch via Mailman-Users wrote:
> > What I want to hear from the Cabal is that there is support and
> > appreciation for efforts by others to carry on with mm2 in any direction
> > it takes them and that their representation in the Cabal is assured.
> 
> So make a proposal to mailman-ca...@python.org

I think at this point the onus is on the Cabal to formally state their
position given that we seen waffling about mm2 finality and security
releases (yes, it did eventually turn out better than it looked), and
comments like this from a current Cabal member: 

  "...the GNU Mailman Project whose core members control access 
   to Mailman resources ranging from mailing list moderation to 
   GSoC slots, has the goal of developing, maintaining and 
   promoting Mailman 3, while winding down Mailman 2 gracefully."


Just what is the Cabal willing to accept in a proposal?

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Mark Sapiro
On 9/13/20 9:01 AM, Jim Popovitch via Mailman-Users wrote:
> 
> What I want to hear from the Cabal is that there is support and
> appreciation for efforts by others to carry on with mm2 in any direction
> it takes them and that their representation in the Cabal is assured.

So make a proposal to mailman-ca...@python.org

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Jim Popovitch via Mailman-Users
On Sun, 2020-09-13 at 15:36 +, Mark Sapiro wrote:
> OK, I'm back and more or less caught up so I'm ready to continue this 
> discussion. 
> 
> In his initial post in this thread, Jim suggests that he and others want to 
> join the Mailman Coders team on Launchpad in order to commit to the Mailman 
> 2.1 branch there. In a thread on the merge proposal that started this, Jim 
> quotes my conjecture that he wants not only commit permission, but also the 
> ability to make releases and distribute them to the appropriate download 
> locations, and says that's "overkill". He also notes my suggestion that he 
> make a proposal to mailman-ca...@python.org which he has not yet done. [1] I 
> mentioned that previously in this thread [2] and Jim replied that my 
> suggestions were "over the top" [3].
> 
> So much for background. Here's my current position. Steve has presented a 
> summary of issues [4] with which I agree. For my part, I have stated that I 
> am willing to continue in my role as Mailman 2.1 release manager and to fix 
> critical bugs and security issues and commit i18n updates, but not implement 
> new features. I am also happy to continue to support Mailman 2.1 users via 
> this list. In fact, I just reported and fixed a bug [5].
> 
> However, if third parties are making changes to the code base, I can no 
> longer make signed releases of code that I haven't audited, and this auditing 
> is what I don't want to do.
> 
> Jim seems to want to be able to make these changes, but seems unwilling to 
> take over as release manager. So, what is the value of these changes if there 
> is never another release?
> 
> I think that's probably enough for this post. I will try to answer any 
> follow-ups.
> 
> [1] 
> https://code.launchpad.net/~jks/mailman/hcaptcha/+merge/389691/comments/1024990
> [2] 
> https://mail.python.org/archives/list/mailman-users@python.org/message/ADOK7LGWRKNM4EJIZKO6CSIJRWCYS74A/
> [3] 
> https://mail.python.org/archives/list/mailman-users@python.org/message/RUZCFKDQAS2AGTPD3GXMCN7B7YBQF245/
> [4] 
> https://mail.python.org/archives/list/mailman-users@python.org/message/XCGIWMFWRY63DZOYHJPRCCUYUXBNDK67/
> [5] https://bugs.launchpad.net/mailman/+bug/1895451


Since it's not clear enough, my "overkill" statement about specifically
about the laundry list of things that Mark said I would need commit and
update access to [1], which seemed above and beyond necessary to me. 
More specifically that list of access-to-everything seems to me like a
jellybean test. e.g. "Ask for all of this so that it is impossible for
you get get any of it".

1. 
https://code.launchpad.net/~jks/mailman/hcaptcha/+merge/389691/comments/1024988

I standby my feelings that some people want to quietly run away from
this established product and make it impossible for any others to take
over.  See Stephens previous comments about how there was no way he
could or would work with anyone working on mm2 because it was against
his objectives, yet he wanted to remain as one of the few in the Cabal
(really just who is the Cabal these days?), thereby preventing any mm2
people from being in the Cabal, the Cabal that Mark just said myself and
anyone else would need permission and access from.  It looks like a
rotten egg, it smells like a rotten egg,

What I want to hear from the Cabal is that there is support and
appreciation for efforts by others to carry on with mm2 in any direction
it takes them and that their representation in the Cabal is assured.

-Jim P.


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-09-13 Thread Mark Sapiro
OK, I'm back and more or less caught up so I'm ready to continue this 
discussion. 

In his initial post in this thread, Jim suggests that he and others want to 
join the Mailman Coders team on Launchpad in order to commit to the Mailman 2.1 
branch there. In a thread on the merge proposal that started this, Jim quotes 
my conjecture that he wants not only commit permission, but also the ability to 
make releases and distribute them to the appropriate download locations, and 
says that's "overkill". He also notes my suggestion that he make a proposal to 
mailman-ca...@python.org which he has not yet done. [1] I mentioned that 
previously in this thread [2] and Jim replied that my suggestions were "over 
the top" [3].

So much for background. Here's my current position. Steve has presented a 
summary of issues [4] with which I agree. For my part, I have stated that I am 
willing to continue in my role as Mailman 2.1 release manager and to fix 
critical bugs and security issues and commit i18n updates, but not implement 
new features. I am also happy to continue to support Mailman 2.1 users via this 
list. In fact, I just reported and fixed a bug [5].

However, if third parties are making changes to the code base, I can no longer 
make signed releases of code that I haven't audited, and this auditing is what 
I don't want to do.

Jim seems to want to be able to make these changes, but seems unwilling to take 
over as release manager. So, what is the value of these changes if there is 
never another release?

I think that's probably enough for this post. I will try to answer any 
follow-ups.

[1] 
https://code.launchpad.net/~jks/mailman/hcaptcha/+merge/389691/comments/1024990
[2] 
https://mail.python.org/archives/list/mailman-users@python.org/message/ADOK7LGWRKNM4EJIZKO6CSIJRWCYS74A/
[3] 
https://mail.python.org/archives/list/mailman-users@python.org/message/RUZCFKDQAS2AGTPD3GXMCN7B7YBQF245/
[4] 
https://mail.python.org/archives/list/mailman-users@python.org/message/XCGIWMFWRY63DZOYHJPRCCUYUXBNDK67/
[5] https://bugs.launchpad.net/mailman/+bug/1895451
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-30 Thread Julian H. Stacey
Jim Popovitch via Mailman-Users wrote:
> On Sun, 2020-08-30 at 14:29 +0900, Stephen J. Turnbull wrote:
> > I wrote a long screed, full of piss and vinegar.  But on reflection,
> > clearly nobody is reading what I wrote earlier, so let's try pithy and
> > dry.  It's still long. :-(
> > 
> > Chip Davis writes:
> > 
> >  > OK guys, what's really going on here?
> > 
> > I don't know.  I can tell you I'm done with Jim.  You'll have to ask
> > him about what he thinks is going on.
> 
> I'm more than happy to detail it.  Stephen and Mark want to move on, and
> get away from mm2, they want everyone else to follow them to mm3. They
> feel that *their* reputations would be hurt if others stayed back and
> continued to work on what they are abandoning. 
> 
> -Jim P.

Risky to state what one believes other people's feeling are.

Mark has been a great help to many with MM2, self included, 
He & all who have helped with MM2 deserve thanks.

Inevitably there comes a time when some want to reduce time on MM2
to spend that time on MM3. Equally, some of us will not want to
have to find time to learn new MM3 tools & reconfig,  so will want
MM2 maintained by whoever can help on that.

Best chance to arrange amicable solution to MM2 maintenance is when 
feelings cool, so a few days pause would probably help.

Cheers,
Julian
-- 
Julian Stacey, Consultant Sys. Engineer, BSD Linux http://berklix.com/jhs/
Crash Brexit Dec. 2020 aids speculators & Russia. http://berklix.uk/brexit/
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-30 Thread Jim Popovitch via Mailman-Users
On Sun, 2020-08-30 at 14:29 +0900, Stephen J. Turnbull wrote:
> I wrote a long screed, full of piss and vinegar.  But on reflection,
> clearly nobody is reading what I wrote earlier, so let's try pithy and
> dry.  It's still long. :-(
> 
> Chip Davis writes:
> 
>  > OK guys, what's really going on here?
> 
> I don't know.  I can tell you I'm done with Jim.  You'll have to ask
> him about what he thinks is going on.

I'm more than happy to detail it.  Stephen and Mark want to move on, and
get away from mm2, they want everyone else to follow them to mm3. They
feel that *their* reputations would be hurt if others stayed back and
continued to work on what they are abandoning. 

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-30 Thread Chip Davis
Thank you, Steve, for your thoughtful and measured reply.  I have a 
clearer picture of the ramifications of Jim's proposal, to the degree 
that he has specified it.  The longer the thread festered, the fewer 
salient points were made, so I can't say that I support it or not.  
But it's not my call in the first place.


I'm glad you have no quarrel with me.  I am merely a Mailman admin 
with no control over any of my installations.  I hope that by the time 
my ISPs drop MM2, there will be ample tools to make the conversion to 
MM3 relatively painless.  Despite an exhaustive search, I can find no 
suitable and affordable alternative.


BTW, the original Rexx interpreter was written in IBM Assembler 
(proprietary), Regina in C (GPL), ooRexx in C/C++ (CPL), NetRexx in 
NetRexx(!) (CPL), and BSF4ooRexx in ooRexx (CPL/AL).  There has been 
no "branching" whatsoever.  Yet there is a lively cross-platform 
collaboration when issues arise, from architecture down to patch. And 
yes, sometimes it can get testy. ;-)


Thank you for you patience.  I consider this matter closed.

-Chip-

On 8/30/2020 1:29 AM, Stephen J. Turnbull wrote:

I wrote a long screed, full of piss and vinegar.  But on reflection,
clearly nobody is reading what I wrote earlier, so let's try pithy and
dry.  It's still long. :-(

Chip Davis writes:

  > OK guys, what's really going on here?

I don't know.  I can tell you I'm done with Jim.  You'll have to ask
him about what he thinks is going on.

I have differences of opinion with you and Carl, but no quarrel.

  > Is this about turf?

Not on our side.  I have genuine concerns.  In Mark's most recent
post, he writes:

  > We only asked that these potential new members actually ask to join
  > the GNU Mailman project as members.

That doesn't look like a concern with turf to me.  Mark may not have
the same concerns I do, or any at all, I don't know.  We'll have to
wait until he gets back.  In the meantime, I'll lay out mine.

  > Is there something about Jim's proposal that requires resources
  > (money, proprietary code, prestige, etc.) from the GNU Mailman group?

Mailman is a GNU project.  Under the GPL, Jim's proposal *needs* no
resources from the GNU Mailman Project, and no blessing from us,
either.  He has the code, and the physical resources are easy to come
by elsewhere.

Certainly it makes economic sense to use the existing repository and
other project resources to support further Mailman 2 development.  It
won't cost Mailman 3 or the Mailman Project anything to share.  But
nobody else has any *right* to any of those resources, and especially
not to the time that Mark and I devote to user support.  If you think
otherwise, you are wrong both as a matter of law and as a matter of
free software philosophy.
  
In this connection, Carl Zwanzig writes:


  > it's vastly different to say "Pay no attention to that GPL,
  > no one is allowed to maintain or improve that code."

That's incoherent.  The complaint is that people *are* maintaining and
improving the code, but we don't allow them to use our resources and
reputation to distribute their code.  That complaint is groundless.
It is fully within the GPL, letter and spirit, to refuse to distribute
code, whether others' or our own.  The spirit of the GPL is that you
can use your own resources to distribute both your code and ours.

Just ask politely, and if you want my support for you to freely commit
to and distribute from the project's Mailman 2 branch, I ask you to
commit to providing support for all its users.

Or don't commit to serving users, just don't free-ride on the Mailman
name and you can have my support.  That was the idea of my original
request to Jim.

Back to Chip:

  > [Are you] genuinely concerned that the continued viability of MM2
  > would be a threat to MM3[?]

Brian may be, and I'd like to hear why.  But at present I am not.

My concern is that a small group of highly competent power users will
take over the Mailman 2 repo, Mark and I will disengage from this list
and Mailman 2 bug channels, and support for ordinary Mailman 2 users
will go in the toilet because the new team is focused on developing an
EOL application in an EOL language, not on user support.

  > I have a little experience [with multiple "branches" of REXX] here.

With all due respect, I don't think it's relevant to what Jim has
proposed so far.  There's a detailed explanation in the "screed", but
the gist is that Mailman 2 and Mailman 3 use completely different
architectures and interfaces, so expertise simply doesn't transfer
between them.  Of recently active developers only Mark and I have
experience with both code bases, and I at least want to wash my hands
of Mailman 2.  AFAICS, the developer teams will have little to talk
about with each other.

As far as the communities go, perhaps we could work together somewhat.
We have a common history, we support the same kind of admins and list
users, there's going to be movement across the Mailman 2 vs. 

[Mailman-Users] Re: mailman v2.x

2020-08-29 Thread Stephen J. Turnbull
I wrote a long screed, full of piss and vinegar.  But on reflection,
clearly nobody is reading what I wrote earlier, so let's try pithy and
dry.  It's still long. :-(

Chip Davis writes:

 > OK guys, what's really going on here?

I don't know.  I can tell you I'm done with Jim.  You'll have to ask
him about what he thinks is going on.

I have differences of opinion with you and Carl, but no quarrel.

 > Is this about turf?

Not on our side.  I have genuine concerns.  In Mark's most recent
post, he writes:

 > We only asked that these potential new members actually ask to join
 > the GNU Mailman project as members.

That doesn't look like a concern with turf to me.  Mark may not have
the same concerns I do, or any at all, I don't know.  We'll have to
wait until he gets back.  In the meantime, I'll lay out mine.

 > Is there something about Jim's proposal that requires resources
 > (money, proprietary code, prestige, etc.) from the GNU Mailman group?

Mailman is a GNU project.  Under the GPL, Jim's proposal *needs* no
resources from the GNU Mailman Project, and no blessing from us,
either.  He has the code, and the physical resources are easy to come
by elsewhere.

Certainly it makes economic sense to use the existing repository and
other project resources to support further Mailman 2 development.  It
won't cost Mailman 3 or the Mailman Project anything to share.  But
nobody else has any *right* to any of those resources, and especially
not to the time that Mark and I devote to user support.  If you think
otherwise, you are wrong both as a matter of law and as a matter of
free software philosophy.
 
In this connection, Carl Zwanzig writes:

 > it's vastly different to say "Pay no attention to that GPL,
 > no one is allowed to maintain or improve that code."

That's incoherent.  The complaint is that people *are* maintaining and
improving the code, but we don't allow them to use our resources and
reputation to distribute their code.  That complaint is groundless.
It is fully within the GPL, letter and spirit, to refuse to distribute
code, whether others' or our own.  The spirit of the GPL is that you
can use your own resources to distribute both your code and ours.

Just ask politely, and if you want my support for you to freely commit
to and distribute from the project's Mailman 2 branch, I ask you to
commit to providing support for all its users.

Or don't commit to serving users, just don't free-ride on the Mailman
name and you can have my support.  That was the idea of my original
request to Jim.

Back to Chip:

 > [Are you] genuinely concerned that the continued viability of MM2
 > would be a threat to MM3[?]

Brian may be, and I'd like to hear why.  But at present I am not.

My concern is that a small group of highly competent power users will
take over the Mailman 2 repo, Mark and I will disengage from this list
and Mailman 2 bug channels, and support for ordinary Mailman 2 users
will go in the toilet because the new team is focused on developing an
EOL application in an EOL language, not on user support.

 > I have a little experience [with multiple "branches" of REXX] here.

With all due respect, I don't think it's relevant to what Jim has
proposed so far.  There's a detailed explanation in the "screed", but
the gist is that Mailman 2 and Mailman 3 use completely different
architectures and interfaces, so expertise simply doesn't transfer
between them.  Of recently active developers only Mark and I have
experience with both code bases, and I at least want to wash my hands
of Mailman 2.  AFAICS, the developer teams will have little to talk
about with each other.

As far as the communities go, perhaps we could work together somewhat.
We have a common history, we support the same kind of admins and list
users, there's going to be movement across the Mailman 2 vs. Mailman 3
boundary.  We share the goal (for us, secondary) of providing good
day-to-day support to folks still using Mailman 2.

But all Jim has proposed so far is to commit and distribute his team's
patches.  I don't mean to be unnecessarily unpleasant: that's a fact.
You've all paid lip service to the Mailman 2 community, but are you
committed to community support?  Who's going to moderate this list?
Who's going to be here day in and day out answering both interesting
bugs and boring FAQs?  What is to be done about users whose preferred
distros EOL their Mailman 2 packages?

 > I can see that it won't immediately lift the entire burden of MM2
 > off of Mark's shoulders,

As far as Mark is concerned, Mailman 2 is EOL.  So it's an objective
fact that this change doesn't lift burden, it *adds* burden: new code,
new questions, new bugs, new releases.

The question is whether Mark will feel free to quit supporting Mailman
2.  I sure will -- there will be a new maintainer to point users at.

 > simply declaring EOL on MM2 and leaving thousands of admins in the
 > lurch.

Mark has already declared EOL a couple of times, although in practice
we 

[Mailman-Users] Re: mailman v2.x

2020-08-29 Thread Stephen J. Turnbull
I'm done, Jim.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-29 Thread Mark Sapiro
On 8/28/20 11:47 PM, Carl Zwanzig wrote:
> 
> If the existing
> gnu-mailman team doesn't want new members working on old code, and
> that's the way it sounds, just say so and give the blessing for a code
> fork.


We never said that. We only asked that these potential new members
actually ask to join the GNU Mailman project as members.

Note: within the hour I am going off-line for 12 days so you won't hear
more from me for a while.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-29 Thread Jim Popovitch via Mailman-Users
On Fri, 2020-08-28 at 23:47 -0700, Carl Zwanzig wrote:
> 
> Or... it's pretty likely that MM2 maintenance, and maybe improvements, will 
> continue in some fashion. The question is whether that's under the auspices 
> of the gnu-mailman project or in a fork. If the existing gnu-mailman team 
> doesn't want new members working on old code, and that's the way it sounds, 
> just say so and give the blessing for a code fork.


I'd love to hear RMS's opinion of that.

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-29 Thread Carl Zwanzig
For clarity- As I understand, given the language differences MM3 was a 
complete rewrite of MM2, so the only common parts are some features, the use 
of python (at all), and the name. Yes? Therefore anyone working on MM2 isn't 
impeding the work on MM3, especially if they weren't going to work on MM3 
anyway.



On 8/28/2020 3:02 PM, Chip Davis wrote:
[...] These are three quite diverse codebases, each with their 
contributors/committers and project-level discussion groups, but there is 
quite a bit of cross-team communication and collaboration.


Just like with net/open/free BSD (and related or spinoff projects), and with 
things being ported between them and to/from linux. The world still hasn't 
ended.



It's all well and good to say "_We_ don't want to maintain this code.", it's 
vastly different to say "Pay no attention to that GPL, no one is allowed to 
maintain or improve that code." With the former, might as well welcome in a 
group of people to the overall project with the express intent of 
maintaining 2.x. With the latter, it's off into saying "no maintenance, no 
changes, nothing" and probably the same group of people will fork off the 
code-base, maybe change the name, and do their maintenance/updates anyway.


Or... it's pretty likely that MM2 maintenance, and maybe improvements, will 
continue in some fashion. The question is whether that's under the auspices 
of the gnu-mailman project or in a fork. If the existing gnu-mailman team 
doesn't want new members working on old code, and that's the way it sounds, 
just say so and give the blessing for a code fork.


Later,

z!
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-28 Thread Chip Davis

OK guys, what's really going on here?

Stephen and Mark, you are both thoughtful writers and crucial members 
of the Mailman team.  Jim, you have made a generous offer that seems 
to have the support of the Mailman 2 user community, at least.


Is this about turf?  Is there something about Jim's proposal that 
requires resources (money, proprietary code, prestige, etc.) from the 
GNU Mailman group?  I really can't see a zero-sum game here, unless 
you are genuinely concerned that the continued viability of MM2 would 
be a threat to MM3.


I have a little experience here.  In 1979 an IBM programmer developed 
Rexx, which became the lingua-franca for all IBM operating systems.  
Internally, IBM developed an O-O version of Rexx which was available 
only on OS/2.  In 1997, after many years of negotiation, IBM donated 
one of its proprietary products to an open-source project for the 
first time.  I was the president of the Rexx Language Association and 
established the ooRexx Project to port it to Linux and care for it.  
In 2011, IBM gave us NetRexx, Rexx for the Java virtual machine.  We 
now also support BSF4ooRexx, which is the full ooRexx for the JVM.


These are three quite diverse codebases, each with their 
contributors/committers and project-level discussion groups, but there 
is quite a bit of cross-team communication and collaboration. Is there 
any reason why this can't be the case with Jim and whatever team he 
can assemble?  I can see that it won't immediately lift the entire 
burden of MM2 off of Mark's shoulders, but it's a better start (and 
example to set) than simply declaring EOL on MM2 and leaving thousands 
of admins in the lurch.


What am I missing?

-Chip-
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-28 Thread Jim Popovitch via Mailman-Users
On Sat, 2020-08-29 at 03:53 +0900, Stephen J. Turnbull wrote:
> Jim Popovitch via Mailman-Users writes:
> 
>  > Again with the "Jim's team".  Those other guys, that other group, them
>  > folks  That's nauseating to hear from you Stephen.
> 
> I use the word "team" to describe people who work together closely to
> achieve common goals.  That's just English.  

Yet, (as you write in the 4 paragraphs below) you see no benefit of
working together closely with anyone in favor of continuing work on mm2.
So which use of "team" is it Stephen? 

> The team I'm on, the GNU
> Mailman Project whose core members control access to Mailman resources
> ranging from mailing list moderation to GSoC slots, has the goal of
> developing, maintaining and promoting Mailman 3, while winding down
> Mailman 2 gracefully.  Mark's "gatekeeping" is a deliberate strategy
> to that end that is an economical use of our resources.  Until you
> spoke up, there wasn't really an alternative anyway given Mark's
> expressed desire to EOL his support of Mailman 2.
> 
> You have a different goal, maintaining, promoting, and developing
> Mailman 2.  As far as I know, you have no interest in doing the same
> for Mailman 3 at this time.  I believe that is also true of others who
> have expressed interest in your proposal.
> 
> I don't see how you can question that these are different teams.  We
> don't need to work together and we won't work together on 99% of what
> either team does.  I do not understand why you take insult at
> references to this simple fact, and spew abuse in return.
> 
> This abuse is quite different from getting upset at the GNU Mailman
> Project's policy of deprecating Mailman 2.  That imposes real costs on
> you.  I understand why that frustrates you.  I understand why you want
> to share in our resources and our reputation that we built up and we
> maintain, rather than fork a new project.  And you know what?  Even
> though your goal of promoting Mailman 2 is apparently opposed to our
> goal of winding down Mailman 2, it presents a great opportunity to do
> it with grace.  I understand and to some extent agree with Brian's
> concerns about technical debt and irresponsible providers.  But I
> don't really see how a shoot-the-prisoner approach to Mailman 2 EOL
> addresses the technical debt and provider issues given the switching
> costs that Mailman 2 users still face.  So I think it would benefit
> Mailman 2 users in the community to take up a friendly offer to
> maintain Mailman 2, and not really harm our goals.
> 
> Problem is, you are not friendly.  You are hostile and abusive, and I
> don't understand why.

Because friendly got us all the way to this point, and it's a point that
could have, and should have, been avoided by not alienating mm2 users
and site owners. Your "team" did that alienation, don't try to throw it
off as the fault of others who are identifying it.

> Ball's in your court, Jim.
> 
>  > Stephen, just who do you think did the DMARC research and work in
>  > MM2?
> 
> What's your point?  Again, you seem to have taken offense, but I'm not
> sure why.  The only contribution I deprecated was my own, and I'm
> baffled at the connection to who did DMARC work.

I'm baffled because you claimed to have headaches from doing all the
DMARC work, and, honestly, you weren't a part of the DMARC work that
Mark, Phil and I did.  And up until our work there was no widely used or
well known DMARC solution in mm2 other than from_is_list (which, lets
face it, hardly anybody knew about or used).  Frank's patch (from 2012)
was not really a solution, and Mark did most of the work on that. Here's
the commit log: 
https://code.launchpad.net/~mlm-author/mailman/2.1-author/+merge/115035

Here's the source of my DMARC work:
https://code.launchpad.net/~jimpop/mailman/dmarc-reject
Here's Phil's contributions:
https://code.launchpad.net/~phil.pennock/mailman/dmarc-reject

And if you look in this list you will find several other merges from me
on DMARC handling: 
https://code.launchpad.net/%7Emailman-coders/mailman/2.1/+merges
What I can't find on that list is contributions/merges from you Stephen.


> To answer your question, though, Franck Martin of LinkedIn and DMARC
> contributed the original from_is_list patch.  I contributed an
> alternative, RFC-conforming wrapper approach (that wasn't useful
> because of Apple Mail's mishandling message/rfc-822 parts), and
> liaised with the DMARC Consortium.  You did something that I forget
> exactly, IIRC related to the DNS fiddling that enabled the mitigations
> only on p=reject domains, which made from_is_list a lot more
> palatable.  Mark did the integration of about 2 dozen patches,
> testing, much of the documentation, and cut several releases
> specifically to ensure that the users got the best DMARC handling we
> could offer right away.  Other people contributed various improvements
> that I don't recall offhand, I think the above are the main ones
> though.  And we owe a debt 

[Mailman-Users] Re: mailman v2.x

2020-08-28 Thread Stephen J. Turnbull
Jim Popovitch via Mailman-Users writes:

 > Again with the "Jim's team".  Those other guys, that other group, them
 > folks  That's nauseating to hear from you Stephen.

I use the word "team" to describe people who work together closely to
achieve common goals.  That's just English.  The team I'm on, the GNU
Mailman Project whose core members control access to Mailman resources
ranging from mailing list moderation to GSoC slots, has the goal of
developing, maintaining and promoting Mailman 3, while winding down
Mailman 2 gracefully.  Mark's "gatekeeping" is a deliberate strategy
to that end that is an economical use of our resources.  Until you
spoke up, there wasn't really an alternative anyway given Mark's
expressed desire to EOL his support of Mailman 2.

You have a different goal, maintaining, promoting, and developing
Mailman 2.  As far as I know, you have no interest in doing the same
for Mailman 3 at this time.  I believe that is also true of others who
have expressed interest in your proposal.

I don't see how you can question that these are different teams.  We
don't need to work together and we won't work together on 99% of what
either team does.  I do not understand why you take insult at
references to this simple fact, and spew abuse in return.

This abuse is quite different from getting upset at the GNU Mailman
Project's policy of deprecating Mailman 2.  That imposes real costs on
you.  I understand why that frustrates you.  I understand why you want
to share in our resources and our reputation that we built up and we
maintain, rather than fork a new project.  And you know what?  Even
though your goal of promoting Mailman 2 is apparently opposed to our
goal of winding down Mailman 2, it presents a great opportunity to do
it with grace.  I understand and to some extent agree with Brian's
concerns about technical debt and irresponsible providers.  But I
don't really see how a shoot-the-prisoner approach to Mailman 2 EOL
addresses the technical debt and provider issues given the switching
costs that Mailman 2 users still face.  So I think it would benefit
Mailman 2 users in the community to take up a friendly offer to
maintain Mailman 2, and not really harm our goals.

Problem is, you are not friendly.  You are hostile and abusive, and I
don't understand why.

Ball's in your court, Jim.

 > Stephen, just who do you think did the DMARC research and work in
 > MM2?

What's your point?  Again, you seem to have taken offense, but I'm not
sure why.  The only contribution I deprecated was my own, and I'm
baffled at the connection to who did DMARC work.

To answer your question, though, Franck Martin of LinkedIn and DMARC
contributed the original from_is_list patch.  I contributed an
alternative, RFC-conforming wrapper approach (that wasn't useful
because of Apple Mail's mishandling message/rfc-822 parts), and
liaised with the DMARC Consortium.  You did something that I forget
exactly, IIRC related to the DNS fiddling that enabled the mitigations
only on p=reject domains, which made from_is_list a lot more
palatable.  Mark did the integration of about 2 dozen patches,
testing, much of the documentation, and cut several releases
specifically to ensure that the users got the best DMARC handling we
could offer right away.  Other people contributed various improvements
that I don't recall offhand, I think the above are the main ones
though.  And we owe a debt to a few PyPI packages.

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-28 Thread Jonathan M
On Wed, Aug 26, 2020 at 2:37 PM Jim Popovitch via Mailman-Users
 wrote:
>
> Hi Folks,
>
> A couple of days ago, over on the MAILOP mailinglist, there was a long
> thread titled 'Mailman confirmation email denial of service'.  This
> detailed some of the problems we've all seen with Mailman subscription
> spam.  The Mailman team has addressed a lot of these problems with
> ReCAPTCHA support and additional configuration options.  Arguably the
> best solution has been the ReCAPTCHA integration.  BUT, a lot of people
> don't like the Google tie-ins that come with ReCAPTCHA.


The person describing the problem in that thread had not set
SUBSCRIBE_FORM_SECRET, and someone with apparently the same problem
described it as "actually filling it correctly (password,
confirmation...) and, as shown below, without even fetching the page
containing the form first". I may well have misunderstood it, and
apologise in advance if I have, but it seems that the problem in
question could have been avoided using an existing feature of Mailman
2.

(It would be ideal if Mailman 2 could be developed until the same set
of people who installed it can install Mailman 3, but I don't know how
realistic that is. I installed MM2 on a shared server, with no real
expertise and at no extra cost, but have been told I would need to pay
for a dedicated server to install MM3. I will probably move to MM3
mainly for its email-from-web feature, but pay to have the list hosted
for me on a subdomain.)

Best wishes

Jonathan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-28 Thread Philip Paeps

On 2020-08-26 21:28:30 (+0800), Jim Popovitch via Mailman-Users wrote:

So, I have volunteered to spearhead an effort to add one or two more
people to the Mailman Coders group[2] in order to vet and approve new
features that continue the long tradition of providing value to 
Mailman

2.x.  Who's with me on this?


This is another long thread with many interesting points of view.

I agree that new installations should probably use Mailman 3.x and 
trivial installations should migrate from Mailman 2.x to 3.x sooner 
rather than later.  On the other hand, I don't believe that there is 
currently a burning need for large, complicated Mailman 2.x 
installations to hurry up and migrate to 3.x already.


The FreeBSD Project runs an awful lot of very active mailing lists on 
Mailman 2.x.  It's probably inevitable that we will eventually upgrade 
to Mailman 3.x.  Given how active our mailing lists are and what Big 
Scary Daemons we have in our mailflow, this will likely be disruptive no 
matter what.


In an effort to keep the disruption to a minimum, we're letting others 
exercise the upgrade paths before us.  Hopefully by the time we find 
that we are forced to upgrade (for whatever reason), we won't run into 
too many edge cases of migration others haven't tried before us.


Meanwhile, we're very grateful for any efforts to keep Mailman 2.x at 
least slightly maintained.  Count me in for helping out with that.


Thank you!

Philip [hat: postmas...@freebsd.org]

--
Philip Paeps
Senior Reality Engineer
Alternative Enterprises
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Dmitri Maziuk

On 8/27/2020 12:41 PM, Phil Stracchino wrote:

On 2020-08-27 13:15, Rich Kulawiec wrote:

3. Captchas are a worst practice in security and should never be used.
They can be and are defeated at will by any adversary who wants to
trouble themselves to do so.  They're also user-hostile.  There are much
better methods available for protecting Mailman instances from abusers.


I've said for some time that traditional captchas are by now almost a
REVERSE test.  Ability to solve them should be taken as stronger
evidence that you are a bot than that you are a human, because bots are
better at solving them than humans are.

Image-style captchas like reCaptcha are better, but they too have a
shocking oversight:  They do not scale well on increasingly-ubiquitous
high-resolution displays.  I'm currently using a 32" 4K monitor, and
even after zooming the page as far as I can, I still sometimes have to
resort to a magnifying glass to be certain whether I'm seeing a
specified object somewhere in the background of one of the images.


Yay, topic drift.

IME the simple stupid server-side captchas are easy enough to solve and 
will deter 100% of the random bang bots & bad search engines. And the 
reason to use them is the page you're protecting can put non-trivial 
load on the server when triggered. It has nothing to do with security, 
nor bots actively trying to solve the captcha.


But reCaptchas aren't any better at defeating bots. I'm certain you'll 
find at least one cite on that in RISKS and/or DefCon archives. And not 
only as you say, half the images are invisible to the naked eye: I have 
privacy badger and an adblock in my browser, I'm sure you can guess how 
nice those javacrap recaptchas play with that.


Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Phil Stracchino
On 2020-08-27 13:15, Rich Kulawiec wrote:
> 3. Captchas are a worst practice in security and should never be used.
> They can be and are defeated at will by any adversary who wants to
> trouble themselves to do so.  They're also user-hostile.  There are much
> better methods available for protecting Mailman instances from abusers.

I've said for some time that traditional captchas are by now almost a
REVERSE test.  Ability to solve them should be taken as stronger
evidence that you are a bot than that you are a human, because bots are
better at solving them than humans are.

Image-style captchas like reCaptcha are better, but they too have a
shocking oversight:  They do not scale well on increasingly-ubiquitous
high-resolution displays.  I'm currently using a 32" 4K monitor, and
even after zooming the page as far as I can, I still sometimes have to
resort to a magnifying glass to be certain whether I'm seeing a
specified object somewhere in the background of one of the images.



-- 
  Phil Stracchino
  Babylon Communications
  ph...@caerllewys.net
  p...@co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Keith Seyffarth
Phil Stracchino  writes:

> On 2020-08-27 12:30, Mark Sapiro wrote:
>> I'm still not clear on what you (Jim) are really wanting to do. I may be
>> wrong on this, but I don't see any distros picking up new versions of
>> Mailman 2.1 unless they come from some 'official' source and so far, the
>> GNU-Mailman project is the only such source. I'm not even sure that any
>> distros are planning to package Mailman 2.1.34.
>
>
> Currently there is no active ebuild for mailman in Gentoo.  2.1.33 has
> been masked, there is no 2.1.34, and 3.3.0 and 3.3.1 exist but have not
> yet been marked stable or unmasked.  The process of stabilizing a
> mailman3 ebuild is ongoing and I've been monitoring it.

mailman-2.1.34 is avaialble from FreeBSD ports (and probably from pkg as
well). Mailman 3 isn't yet.

-- 


Keith Seyffarth
mailto:w...@weif.net
https://www.weif.net/ - Home of the First Tank Guide!
https://www.rpgcalendar.net/ - the Montana Role-Playing Calendar

http://www.miscon.org/ - Montana's Longest Running Science Fiction Convention
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Dmitri Maziuk

On 8/27/2020 3:27 AM, Stephen J. Turnbull wrote:

Dmitri Maziuk writes:

  > The point was that the argument about MM3 having a long life expectancy
  > "because python 3" is not in any way, shape, or form supported by the
  > history of the python programming language to date.

*chortle* *In Mailman's experience* Python's backward compatibility
record has been an annoyance because it's *too good*.  Much of the
time we were officially supporting *four* 2.x versions, and it would
have been *five* at times except that we were conservative about
supporting the most recent release.  It was almost always trivial to
do so.  This policy of supporting old Python versions was quite
painful at times, preventing us from taking advantage of new Python
features.


Yes, precisely: "feechorz". My point wasn't that MM is having python 
compatibility problem, it was that python has compatibility problem with 
itself.



Although the port of Mailman 3 to Python 3 took a couple of years,
after that we had a spurt of rapid development, because Python 3 is a
much better environment for development of new code, and because str-
is-Unicode-inside made the email package much more reliable.  A lot
(not all, but a lot) of bugs were simply made impossible.  We don't
support as many versions of Python 3 (usually 2-3) because our current
Mailman 3 user population is smaller, biased toward the beta tester
type, and generally more sophisticated.


Yes, exactly. I run stable infrastructure services for not Beta Tester 
types, I want Simple Stupid and Stable.



Beside the point, actually.  There are *many* people supporting MM2
users (including me and Jim P, for two prominent examples).  But the
patch rate has been near zero for *years*, and has definitely *not*
included many of the patches I imagine Jim would want to include.

...

"There is none so blind as he who will not see" what is in the
archives of mailman-users and mailman-developers many times.  Mark
hasn't set a sunset date, but soon he's going to Just Say No.


Well if the patch rate is near zero, then it doesn't matter anyway. And 
yes, I am well aware of the previous discussions on the subject, and of 
the need to DIY spamd.py and SpamAssassin.py and so on. I'll take that 
over a django instance, even containerized, any day.


Dima
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Keith Seyffarth
> On 8/27/2020 9:54 AM, Phil Stracchino wrote:
>> Currently there is no active ebuild for mailman in Gentoo.  2.1.33 has
>> been masked, there is no 2.1.34, and 3.3.0 and 3.3.1 exist but have not
>> yet been marked stable or unmasked. 
>
> FWIW, FreeBSD 12.1-RELEASE amd64 has 2.1.34 in both the pkg repo and the 
> ports tree. I do not see a MM3 package but didn't look too closely.

I did try to look for MM3 and couldn't find it. I'm sure it's coming,
especially with FreeBSD expiring Python27 and security checks warning
about numerous other items relying on Python27.

-- 

Keith Seyffarth
mailto:w...@weif.net
https://www.weif.net/ - Home of the First Tank Guide!
https://www.rpgcalendar.net/ - the Montana Role-Playing Calendar

http://www.miscon.org/ - Montana's Longest Running Science Fiction Convention
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Rich Kulawiec
On Wed, Aug 26, 2020 at 09:28:30AM -0400, Jim Popovitch via Mailman-Users wrote:
> So, I have volunteered to spearhead an effort to add one or two more
> people to the Mailman Coders group[2] in order to vet and approve new
> features that continue the long tradition of providing value to Mailman
> 2.x.  Who's with me on this?

1. Sure.

2. I'm finishing the book on it anyway, so I might as well. ;)

3. Captchas are a worst practice in security and should never be used.
They can be and are defeated at will by any adversary who wants to
trouble themselves to do so.  They're also user-hostile.  There are much
better methods available for protecting Mailman instances from abusers.

Yes yes I know I just signed myself up to explain those.  This is not
my first time. ;)

4. One of things that I discovered while doing (2) is that Mailman v2.x
expects that it has *outbound* HTTP access.  I need to write this up
so that the problem is understandable/arguable/fixable, but: it's a
really bad idea to presume that's the case, and it's an equally bad
idea to make it the case.

---rsk
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-08-27 at 10:05 -0700, Mark Sapiro wrote:
> On 8/27/20 3:29 AM, Jim Popovitch via Mailman-Users wrote:
> > There is sooo much to respond to, but in order to stay on focus... 
> > Brian, you fail to identify the problem, in fact you mischaracterized
> > it. Mark is essentially gatekeeping.  He is saying that he wants to
> > continue to control security maintenance of mm2 but he wants any other
> > feature development to be under a different umbrella away from his
> > gatekeeping.
> 
> I am the gatekeeper because the current Mailman 2.1 branch belongs to
> the GNU-Mailman project and I am the only member of that project who is
> doing anything with updating/releasing Mailman 2.1. If I weren't there,
> the gate would be locked.

The phrasing of "the current Mailman 2.1 branch belongs to the GNU-
Mailman project" seems odd.

> > Absolutely not.  We see life in MM2 and want the gatekeepers out of the
> > way.
> 
> We've had this discussion at
> ;. I have
> told you what you need to do to get commit permission to the branch at
> ;, and I assume
> that your initial post in this thread was an effort to get others to
> join you in this. I am sure that I and the other members of the
> GNU-Mailman project will give serious consideration to anything you
> propose, but we haven't seen a proposal yet.

To be honest, I felt your post here
https://code.launchpad.net/~jks/mailman/hcaptcha/+merge/389691/comments/1024988 
was a bit over the top.  You seem to have gone on and on about listing
all the possible things that I would need access to, as though it would
be such an impossibility for the Cabal to approve.  

> Please stop painting me as an obstructionist who wants to kill Mailman
> 2.1. I do not think that's a fair characterization.

I'm not here to judge you, I think your position on Mailman 2.1 is very
clear, and I think my good and thankful opinion of you is well
understood by the readers of this email.

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Carl Zwanzig

On 8/27/2020 9:54 AM, Phil Stracchino wrote:

Currently there is no active ebuild for mailman in Gentoo.  2.1.33 has
been masked, there is no 2.1.34, and 3.3.0 and 3.3.1 exist but have not
yet been marked stable or unmasked. 


FWIW, FreeBSD 12.1-RELEASE amd64 has 2.1.34 in both the pkg repo and the 
ports tree. I do not see a MM3 package but didn't look too closely.


z!
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-08-27 at 09:30 -0700, Mark Sapiro wrote:
> On 8/27/20 3:41 AM, Jim Popovitch via Mailman-Users wrote:
> > On Thu, 2020-08-27 at 17:41 +0900, Stephen J. Turnbull wrote:
> > > The question for you is what benefit there is to anyone in having
> > > Mailman 2 maintenance inside the Mailman Project going forward.  
> > 
> > You mean inside the Mailman3 Project at mailman3.org?  None.
> > 
> > > The Mailman Project certainly doesn't want to encourage new 
> > > installations of Mailman 2.  
> > 
> > Again, Do you mean the Mailman3 Project at mailman3.org and on the MM3-
> > org mailinglists?  If so, fine, move on.
> 
> I think Steve is referring to the GNU-Mailman project which is the group
> of people, always small and continuously evolving, starting with John
> Viega, who've been responsible for the development and maintenance of
> Mailman since it's inception.
> 
> I'm still not clear on what you (Jim) are really wanting to do. 

I want there to be a team, and I'm willing to be a part of it, that sees
merge requests and accepts or rejects them as features for Mailman 2.x
based on their value and suitability (not based on fear of any effect it
will have on mm3).  JUST Like you (Mark) alone did for all of these
merge requests except for the most recent 1:  
https://code.launchpad.net/%7Emailman-coders/mailman/2.1/+merges

> I may be
> wrong on this, but I don't see any distros picking up new versions of
> Mailman 2.1 unless they come from some 'official' source and so far, the
> GNU-Mailman project is the only such source. I'm not even sure that any
> distros are planning to package Mailman 2.1.34.

The distros may not rollout pure mm2.1.34, but they certainly do pick
and choose bits to apply to their maintained version. For example, the
DMARC and other stuff that I contributed wound up in numerous versions
of Mailman as released by distros and their derivatives. 


> I don't think Steve or I is being 'proprietary' about Mailman per se,
> but we are proprietary about the GNU-Mailman project,

To me, they are the same. As you said above, distros aren't going to
pull from un-official sources, so supporting "Mailman" is only relevant
in the context of supporting "GNU-Mailman".

> so the question is
> do Jim and possibly others become part of the GNU-Mailman project and
> continue to maintain the 2.1 branch on Launchpad or wherever and make
> 'official' releases, or do they fork the project and hope that their
> fork becomes the accepted source for Mailman 2.1.x.

I don't know why you think that's a valid question given that you have
stated you have no proprietary interest in Mailman.  I think it would
help everyone if you explained just what you mean by, and any
proprietary items you can identify, when you say "GNU Mailman"

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Mark Sapiro
On 8/27/20 3:29 AM, Jim Popovitch via Mailman-Users wrote:
> 
> There is sooo much to respond to, but in order to stay on focus... 
> Brian, you fail to identify the problem, in fact you mischaracterized
> it. Mark is essentially gatekeeping.  He is saying that he wants to
> continue to control security maintenance of mm2 but he wants any other
> feature development to be under a different umbrella away from his
> gatekeeping.


I am the gatekeeper because the current Mailman 2.1 branch belongs to
the GNU-Mailman project and I am the only member of that project who is
doing anything with updating/releasing Mailman 2.1. If I weren't there,
the gate would be locked.


> Absolutely not.  We see life in MM2 and want the gatekeepers out of the
> way.


We've had this discussion at
. I have
told you what you need to do to get commit permission to the branch at
, and I assume
that your initial post in this thread was an effort to get others to
join you in this. I am sure that I and the other members of the
GNU-Mailman project will give serious consideration to anything you
propose, but we haven't seen a proposal yet.

Please stop painting me as an obstructionist who wants to kill Mailman
2.1. I do not think that's a fair characterization.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Phil Stracchino
On 2020-08-27 12:30, Mark Sapiro wrote:
> I'm still not clear on what you (Jim) are really wanting to do. I may be
> wrong on this, but I don't see any distros picking up new versions of
> Mailman 2.1 unless they come from some 'official' source and so far, the
> GNU-Mailman project is the only such source. I'm not even sure that any
> distros are planning to package Mailman 2.1.34.


Currently there is no active ebuild for mailman in Gentoo.  2.1.33 has
been masked, there is no 2.1.34, and 3.3.0 and 3.3.1 exist but have not
yet been marked stable or unmasked.  The process of stabilizing a
mailman3 ebuild is ongoing and I've been monitoring it.


-- 
  Phil Stracchino
  Babylon Communications
  ph...@caerllewys.net
  p...@co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Mark Sapiro
On 8/27/20 3:34 AM, Jim Popovitch via Mailman-Users wrote:
> 
> Stephen, just who do you think did the DMARC research and work in MM2? 
> Phil, Mark, care to chime in on this?


The original DMARC mitigation work was contributed by Franck Martin of
LinkedIn and was in Mailman as a site optional feature in Mailman 2.1 16
(16-Oct-2013) prior to Yahoo publishing DMARC p=reject in April of 2014.

The implementation of DNS lookup to enable DMARC mitigations to be
applied conditionally based on the From domain's DMARC policy introduced
in Mailman 2.1.18 (03-May-2014) was contributed by Jim Popovitch and
Phil Pennock

See
.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Mark Sapiro
On 8/27/20 3:41 AM, Jim Popovitch via Mailman-Users wrote:
> On Thu, 2020-08-27 at 17:41 +0900, Stephen J. Turnbull wrote:
>>
>> The question for you is what benefit there is to anyone in having
>> Mailman 2 maintenance inside the Mailman Project going forward.  
> 
> You mean inside the Mailman3 Project at mailman3.org?  None.
> 
>> The Mailman Project certainly doesn't want to encourage new 
>> installations of Mailman 2.  
> 
> Again, Do you mean the Mailman3 Project at mailman3.org and on the MM3-
> org mailinglists?  If so, fine, move on.


I think Steve is referring to the GNU-Mailman project which is the group
of people, always small and continuously evolving, starting with John
Viega, who've been responsible for the development and maintenance of
Mailman since it's inception.

I'm still not clear on what you (Jim) are really wanting to do. I may be
wrong on this, but I don't see any distros picking up new versions of
Mailman 2.1 unless they come from some 'official' source and so far, the
GNU-Mailman project is the only such source. I'm not even sure that any
distros are planning to package Mailman 2.1.34.

I don't think Steve or I is being 'proprietary' about Mailman per se,
but we are proprietary about the GNU-Mailman project, so the question is
do Jim and possibly others become part of the GNU-Mailman project and
continue to maintain the 2.1 branch on Launchpad or wherever and make
'official' releases, or do they fork the project and hope that their
fork becomes the accepted source for Mailman 2.1.x.


-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: mailman v2.x

2020-08-27 Thread Jim Popovitch via Mailman-Users
On Thu, 2020-08-27 at 17:27 +0900, Stephen J. Turnbull wrote:
> MM3, on the other hand, not only has three more or less active
> developers, it also has frequent releases including new features as
> well as bug fixes.

That could still be happening for MM2 if not for some imaginary line in
the sand.

-Jim P.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


  1   2   >