[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: The BTS and bug subscriptions

On Tue, 2005-07-26 at 00:33 +0400, Nikita V. Youshchenko wrote:
> >> As in once you confirmed one subscription the next one doesn't ask
> >> anymore? Sort of greylisting?
> >> 
> >> Sounds good.
> > 
> > It should always ask for confirmation unless someone has specifically
> > made the decision that they don't want to have to opt-in.
> Maybe it should honour subscription requests without confirmation if request
> is GPG-signed by the key with uid equal to address being subscribed.

I'm afraid this doesn't give us much.

It's trivial to add uids to a GPG key, and headers aren't actually
signed anyway, so you could replay signed messages to the server.



Reply to: