Re: best place to run an email-forwarding bot account?
On Thu, 12 Nov 2020 at 18:13, Matthew Miller wrote: > On Thu, Nov 12, 2020 at 02:56:10PM -0800, Kevin Fenzi wrote: > > I'm not sure I like this from a security point of view... is there any > > way we could use the discourse api and pull a digest from a script and > > have it post to the list? (getting rid of the email in part)? > > I mean, probably? That suddenly escalates it to "much bigger project that > I'm not sure is worth it". > > As for security -- it's no worse than we have now, right? I mean, email > coming into lists is just secured by it claiming to be from a list member, > right? > > (The email address the the bot user takes incoming messages at could be > something entirely different from the address subscribed to the mailing > list.) > > > I am not as much worried about the security around dealing with procmail filtering (which in my experience has had problems.) I am more worried about these emails having to go through the multiple layers of Red Hat filtering we have to send email in and out of Fedora. Then dealing with all the ways that these sorts of emails break various people's DMARC rules. Then there is the fact that people are going to reply to the list and never see any replies, get told to post it in discourse, get into an argument that they shouldn't need to and why can't Fedora parse this stuff over. [I say this from the other tools where we start on a "this sounds like a good idea" and end up with a lot of make work to patch together two systems which are actively hostile to each other.] And finally, this is not going to be a one-off. This is going to be a lot of lists over time and those groups are going to want to go to various places and have similar levels of whatever we put into this. The council wants to move any lists to discourse.. then they should move them to discourse and be done with it. Many of the people who don't want to head over aren't going to be happy with any partial solution. If people want to follow via email they can set up their own digests. > -- > Matthew Miller > > Fedora Project Leader > ___ > infrastructure mailing list -- infrastructure@lists.fedoraproject.org > To unsubscribe send an email to > infrastructure-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org > -- Stephen J Smoogen. ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
Re: best place to run an email-forwarding bot account?
On Thu, Nov 12, 2020 at 02:56:10PM -0800, Kevin Fenzi wrote: > I'm not sure I like this from a security point of view... is there any > way we could use the discourse api and pull a digest from a script and > have it post to the list? (getting rid of the email in part)? I mean, probably? That suddenly escalates it to "much bigger project that I'm not sure is worth it". As for security -- it's no worse than we have now, right? I mean, email coming into lists is just secured by it claiming to be from a list member, right? (The email address the the bot user takes incoming messages at could be something entirely different from the address subscribed to the mailing list.) -- Matthew Miller Fedora Project Leader ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
Re: best place to run an email-forwarding bot account?
On Thu, Nov 12, 2020 at 02:13:02PM -0500, Matthew Miller wrote: > 2. Is there a place in Fedora Infrastructure that can receive and bounce >mail like that? I can, by the way, easily set it up on my own server, and it wouldn't be hard to do that and then later change the address of the bot. But having it on my own server is ... fragile. -- Matthew Miller Fedora Project Leader ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
Re: best place to run an email-forwarding bot account?
On Thu, Nov 12, 2020 at 02:13:02PM -0500, Matthew Miller wrote: > The Fedora Council is moving from our mailing list to > discussion.fedoraproject.org. However, I want to have a digest of discussion > go to the old list, for people who prefer to follow a summary that way. > > Discourse has a digest feature, but no "automatically send a digest to this > address" ability separate from individual user accounts. So, I was thinking > I could create a "fedora-council-discuss-bot" FAS account, and have that > email go to somewhere with a procmail filter which forwards the digests (and > only the digests, obviously) to the council list. Then I'd set the list to > only allow posts from that bot address. > > 1. Does this plan seem reasonable? > 2. Is there a place in Fedora Infrastructure that can receive and bounce >mail like that? Nope, not currently. I'm not sure I like this from a security point of view... is there any way we could use the discourse api and pull a digest from a script and have it post to the list? (getting rid of the email in part)? kevin signature.asc Description: PGP signature ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
best place to run an email-forwarding bot account?
The Fedora Council is moving from our mailing list to discussion.fedoraproject.org. However, I want to have a digest of discussion go to the old list, for people who prefer to follow a summary that way. Discourse has a digest feature, but no "automatically send a digest to this address" ability separate from individual user accounts. So, I was thinking I could create a "fedora-council-discuss-bot" FAS account, and have that email go to somewhere with a procmail filter which forwards the digests (and only the digests, obviously) to the council list. Then I'd set the list to only allow posts from that bot address. 1. Does this plan seem reasonable? 2. Is there a place in Fedora Infrastructure that can receive and bounce mail like that? -- Matthew Miller Fedora Project Leader ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
