oss-sec mailing list archives

Re: subscription-request procedure?


From: Josh Bressers <bressers () redhat com>
Date: Tue, 19 Feb 2008 16:36:45 -0500


Since folks like Jim are exactly the type of people we want on the list,
we need to make the process fairly simple (and fast, if possible) to
prevent turning people off.

In fact, I think even something as simple as compulsory introduction
will turn some people away - e.g., those Open Source authors who are new
to security and would like to listen to our conversations before they
might dare to introduce themselves.

Maybe we don't really require it?  Maybe we don't really need to make
this list subscription-moderated?  This implies that we'll have to
enable message moderation (with its associated delays) even for list
members at some point, though.

To avoid the delays, we might enhance (patch) ezmlm-idx to honor its
"allow" list even for fully-message-moderated lists.  This is probably
not too hard to do, although I have not looked into it.  Normally, the
"allow" list appears to only be honored for lists that are
message-moderated for non-members.


Yes, these are very good points.  I think the best solution at the moment
would be to let anyone who is subscribed to post, and let anyone subscribe.
If we have problems, we can tighten things up a bit later.

This is one of the tricking things when starting something up such as this.
It's easy to solve problems that don't exist, which then end up turning
people away.

FWIW, mailman has the ability to enable individual user moderation.
Something similar would certainly be a useful feature here.

-- 
    JB


Current thread: