On Thu, Nov 12, 2020 at 02:56:10PM -0800, Kevin Fenzi wrote:
I'm not sure I like this from a security point of view... is
there any
way we could use the discourse api and pull a digest from a script and
have it post to the list? (getting rid of the email in part)?
I mean, probably? That suddenly escalates it to "much bigger project that
I'm not sure is worth it".
As for security -- it's no worse than we have now, right? I mean, email
coming into lists is just secured by it claiming to be from a list member,
right?
(The email address the the bot user takes incoming messages at could be
something entirely different from the address subscribed to the mailing
list.)
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader