On Sun, 27 Jul 2008 15:58:57 +0100 Neil Williams <[EMAIL PROTECTED]> wrote:
>Why force activation in the first place? All the information needed to >"activate" a DD account already exists - our GnuPG fingerprints, our DD >email addresses and full names. If an email is received that is signed >by a known key belonging to a DD, LP should just accept the blasted >thing and stop looking for any other authentication or activation or >login or anything else of any kind, ever. If someone can send an email >to LP signed by my key then I have a lot more to worry about than >whether LP is going to refuse to authenticate that email. Any email >signed by a known key belonging to a DD should be accepted without >question or authentication or activation or anything else. Great idea. Bug filed: https://bugs.launchpad.net/bugs/252368 Scott K -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
