Skip to Content.
Sympa Menu

en - Re: [sympa-users] mail confirmation is NOT equivalent to password authentication

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: Peter Farmer <address@concealed>
  • To: address@concealed
  • Cc: Olivier Salaün - CRU <address@concealed>
  • Subject: Re: [sympa-users] mail confirmation is NOT equivalent to password authentication
  • Date: Wed, 23 Aug 2006 00:25:22 +0800

On Tuesday 22 August 2006 11:54 pm, Olivier Salaün - CRU wrote:
> That's a known problem we have for the sending process. Things are
> complicated because the mail distribution process is delegated by
> wwsympa to the sympa.pl process ;

yeah, I noticed that, while watching debugging output in the syslog 8-)

> therefore wwsympa leaves the message
> as a file in the msg/ spool. What we need is assert sympa.pl that the
> author of the message has been properly authenticated.

Dont have a good enough grip on the code to offer any properly considered
approaches yet, but how does posting via SSL with a user certificate for
authentication work? . Havent tried it yet, but the doco and code both
imply that a message posted from an SSL login with a cert is considered as
properly authenticated ?. Or is it broken too ?

> I realize that we don't have an entry for this bug in our tracking
> system, please add one :
> http://sourcesup.cru.fr/tracker/?group_id=23

done

Thanks,
Peter Farmer.




Archive powered by MHonArc 2.6.19+.

Top of Page