https://bugzilla.wikimedia.org/show_bug.cgi?id=48786

--- Comment #6 from Krinkle <[email protected]> ---
I agree with Alex.

A few considerations:
* Lists should require smtp authentication from @wikimedia.org domains and
reject the fake mail from labs (and if not already, fix the one in production
to use smtp instead of sendmail). Afaik this was already talked about a while
ago for other reasons, surprised it hasn't happened yet.
* Members only list (like -announce, if not already), labs would be able to
send as its e-mailaddress wouldn't be a valid member (I assume Mailman doesn't
allow sending to a member-post-only list by simply faking the From: header to
that of a member).
* Some other means that makes it impossible for a simple bash script running
outside production to spam this list.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to