Re: Bugzilla email confirmation notices from FAS

2022-01-11 Thread Kevin Fenzi
On Tue, Jan 11, 2022 at 11:58:36AM -0500, Christopher wrote: > Hi, > > Today, I received an email from f...@fedoraproject.org with the subject > line "Fedora Account System: please verify your Bugzilla email > address". This email has a unique link to accounts.fedoraproject.org. > > Based on the

Re: Bugzilla email confirmation notices from FAS

2022-01-11 Thread Christopher
On Tue, Jan 11, 2022 at 1:53 PM Adam Williamson wrote: > > On Tue, 2022-01-11 at 18:15 +0100, Alexander Sosedkin wrote: > > On Tue, Jan 11, 2022 at 6:04 PM Yaakov Selkowitz > > wrote: > > > > > > On Tue, 2022-01-11 at 11:58 -0500, Christopher wrote: > > > > Hi, > > > > > > > > Today, I received

Re: Bugzilla email confirmation notices from FAS

2022-01-11 Thread Christopher
On Tue, Jan 11, 2022 at 12:10 PM Arthur Bols wrote: > > On 11/01/2022 18:03, Yaakov Selkowitz wrote: > > You want anyone who receives or intercepts those emails to be able to access > > your account *without* logging in?!? > How I interpreted it, and how most websites do it, is that the unique >

Re: Bugzilla email confirmation notices from FAS

2022-01-11 Thread Adam Williamson
On Tue, 2022-01-11 at 18:15 +0100, Alexander Sosedkin wrote: > On Tue, Jan 11, 2022 at 6:04 PM Yaakov Selkowitz wrote: > > > > On Tue, 2022-01-11 at 11:58 -0500, Christopher wrote: > > > Hi, > > > > > > Today, I received an email from f...@fedoraproject.org with the subject > > > line "Fedora

Re: Bugzilla email confirmation notices from FAS

2022-01-11 Thread Alexander Sosedkin
On Tue, Jan 11, 2022 at 6:04 PM Yaakov Selkowitz wrote: > > On Tue, 2022-01-11 at 11:58 -0500, Christopher wrote: > > Hi, > > > > Today, I received an email from f...@fedoraproject.org with the subject > > line "Fedora Account System: please verify your Bugzilla email > > address". This email has

Re: Bugzilla email confirmation notices from FAS

2022-01-11 Thread Arthur Bols
On 11/01/2022 18:03, Yaakov Selkowitz wrote: You want anyone who receives or intercepts those emails to be able to access your account *without* logging in?!? How I interpreted it, and how most websites do it, is that the unique link just verifies the email address (or any other non-critical

Re: Bugzilla email confirmation notices from FAS

2022-01-11 Thread Yaakov Selkowitz
On Tue, 2022-01-11 at 11:58 -0500, Christopher wrote: > Hi, > > Today, I received an email from f...@fedoraproject.org with the subject > line "Fedora Account System: please verify your Bugzilla email > address". This email has a unique link to accounts.fedoraproject.org. > > Based on the

Bugzilla email confirmation notices from FAS

2022-01-11 Thread Christopher
Hi, Today, I received an email from f...@fedoraproject.org with the subject line "Fedora Account System: please verify your Bugzilla email address". This email has a unique link to accounts.fedoraproject.org. Based on the context, it seems legitimate. However, I noticed that clicking the link