Fwd: pass it along- committer emails can bypass moderation

[Andy Seaborne <an...@apache.org>]

-------- Original Message --------
Subject: 	pass it along- committer emails can bypass moderation
Date: 	Sat, 14 Jun 2014 08:27:36 -0700 (PDT)
From: 	Joe Schaefer <jo...@yahoo.com>
Reply-To: 	members@apache.org, Joe Schaefer <jo...@yahoo.com>
To: 	members@apache.org <me...@apache.org>



We've just instituted a long-sought change to our mailing
list infrastructure that allows emails sent from apache.org
addresses to bypass list moderation.  Recall that ezmlm
relies on the envelope MAIL FROM setting, not the From
address, though in most situations the two are the same.

Also for the past few years we've been offering an SMTP
submission service on people.apache.org port 465.  Gmail
users will find a convenient feature set that can take advantage
of this service whenever you wish to send email using your
committer address.  We have some docs on that here:

Committer email configuration 
<http://www.apache.org/dev/user-email.html#via-smtp-based-mail-submission-service-recommended>

You've already seen this committer bypass feature in action on
our commit lists; and we're committing to this complete rollout
based on the solid results and lack of any evidence of abuse.  To
be sure we have mitigation strategies that we can deploy if
abuse (=spam) ever enters into the picture, but I'm mentioning that
only for completeness not out of an expectation that it will happen
anytime soon.