[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#950327: tracker.debian.org: do not use "From" address from upload announcements



Package: tracker.debian.org
Severity: minor

dak no longer uses the maintainer's address in the "From" field[1] to
avoid problems with forged sender addresses (e.g. DMARC).

tracker.d.o shows the "From" address in the "news" section for uploads
which currently results in lines like:

 [2020-01-31] Accepted lintian-brush 0.57 (source) into unstable (Debian FTP Masters) (signed by: Jelmer Vernooij) 

It might be more approriate to show the name from the Changed-By field
instead.  The mails might also get an additional header indicating the
maintainer name (see [2]).

Ansgar

  [1]: https://salsa.debian.org/ftp-team/dak/merge_requests/175
  [2]: https://bugs.debian.org/950132#27


Reply to: