List change - munging for From addresses

Stephen Rothwell sfr at canb.auug.org.au
Mon Aug 5 12:42:04 AEST 2024


Hi Konstantin,

On Fri, 2 Aug 2024 11:54:06 -0400 Konstantin Ryabitsev <konstantin at linuxfoundation.org> wrote:
>
> Not really, for two reasons:
> 
> - X-Original-From is widely used, but isn't really a standard header.

In our case, Mailman puts the original address in the Reply-To header.

> - From-munging breaks end-to-end attestation, so we consider x-original-from
>   and similar headers a potential impersonation attempt and ignore them.

OK.

> I would generally say that From-munging isn't a great option for any list that
> receives patches. A much better approach is to just not modify the message
> headers or message body. This should be possible with mailman.

Unfortunately, I have not found a way to ensure Mailman (v2, at least)
will not modify messages in all cases e.g. in some circumstances it
will modify the To/Cc list.

So, an alternative for us (though considerable more work) is to change
mailing list software.  Mailmanv3 would be an option, but seems overly
complex.  I see vger.kernel.org is now using mlmmj - is that a
reasonable option for us (i.e. is it able to not modify messages but
still have enough features)?  If so any hints about migrating? ;-)
-- 
Cheers,
Stephen Rothwell
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.ozlabs.org/pipermail/linuxppc-dev/attachments/20240805/dc097bee/attachment.sig>


More information about the Linuxppc-dev mailing list