Thursday, June 06, 2019

Re: OpenBSD maintainers Spring cleaning

On 2019/06/06 07:47, Renaud Allard wrote:
>
>
> On 6/6/19 12:54 AM, Daniel Jakots wrote:
> >
> > Some people mailed me after I posted the list here and no one said
> > it was in their spam.
>
> If people receive a lot of mails and receive that one from an "unknown"
> email address (understand non @openbsd.org), and the mail looks like some
> kind of phishing attempt, they may have deleted it on sight. I was also
> reluctant at answering because I didn't know the mail address from the
> sender.

How does a mail listing what ports ypu maintain, asking you to reply
saying if you want to continue, possibly look like phishing - would these
people also ignore emails with other questions about their ports (whether
from an openbsd.org address or not)? Part of the commitment for being
listed as a maintainer is responding to questions about the port.

> Next time, I think it might be interesting to send it from an @openbsd.org
> mail address. Of course, from the official servers with SPF/DKIM, etc set up
> correctly.

SPF is a non-starter for openbsd.org, it doesn't fit at all well with
how the email domain is used. And if we had to get DKIM setup on
openbsd.org first this much needed maintenance would just never get
done. (And without one or the other the mails would be very likely
to fail).

I think doing this differently than danj@ did (within the constraints we
have to work with) would have either reduced deliverability or, if he'd
set reply-to openbsd.org, would have made it harder for replies to get
through.

No comments:

Post a Comment