Re: List change - munging for From addresses
From: Stephen Rothwell <hidden>
Date: 2024-08-05 02:42:57
Attachments
- (unnamed) [application/pgp-signature] 488 bytes
From: Stephen Rothwell <hidden>
Date: 2024-08-05 02:42:57
Hi Konstantin, On Fri, 2 Aug 2024 11:54:06 -0400 Konstantin Ryabitsev [off-list ref] wrote:
Not really, for two reasons: - X-Original-From is widely used, but isn't really a standard header.
In our case, Mailman puts the original address in the Reply-To header.
- From-munging breaks end-to-end attestation, so we consider x-original-from and similar headers a potential impersonation attempt and ignore them.
OK.
I would generally say that From-munging isn't a great option for any list that receives patches. A much better approach is to just not modify the message headers or message body. This should be possible with mailman.
Unfortunately, I have not found a way to ensure Mailman (v2, at least) will not modify messages in all cases e.g. in some circumstances it will modify the To/Cc list. So, an alternative for us (though considerable more work) is to change mailing list software. Mailmanv3 would be an option, but seems overly complex. I see vger.kernel.org is now using mlmmj - is that a reasonable option for us (i.e. is it able to not modify messages but still have enough features)? If so any hints about migrating? ;-) -- Cheers, Stephen Rothwell