On Fri, Jun 25, 2010 at 1:06 PM, Didier Roche <[email protected]> wrote: > Le vendredi 25 juin 2010 à 21:54 +1000, Robert Collins a écrit : >> I like the idea of sending emails when important account settings are >> changed: it helps with: >> - cross site attacks >> - apis that permit changing such settings >> - screen scraping via embedded browser instances >> >> and possibly more. >> >> Its also nonintrusive and straightforward, and we could include a >> confirmation token in the email people get sent too, if we felt thats >> needed. >> >> That is: >> LP.me.addSSHKey(...) >> -> email sent >> <-202 ACCEPTED (please check your email and confirm via the token link in it) >> Quickly shows the user 'please check email' >> User clicks in the email, ssh key is enabled / disabled. > > Sounds a good way to avoid all the non-permitted apps and hacks to go > away. Love it! > > Well, at first release, people will have 3/4 mails if they setup > nothing: > - ssh > - gpg > - coc > - ppa >
Hey everyone, I've created a LEP for this, summarising the discussion and articulating the constraints that bind any solution: https://dev.launchpad.net/LEP/ActivatingDevelopmentFromDesktop Please review the LEP. Tomorrow, if no one has objected I will mark it approved. If we assume that a post-hoc email is enough (and I think it is), then we have the following work items: 1. Send an email every time someone registers an SSH key 2. Send an email every time someone registers a GPG key 3. Send an email to the user, confirming they have signed the code of conduct 4. Create and expose an API for adding SSH keys 5. Create and expose an API for adding GPG keys 6. Create and expose an API for signing the code of conduct * Perhaps this could be email? I don't care either way. 7. Create and expose an API for creating a PPA Didier, the more of these you can do yourself, the more quickly this will get done. Are there any of these items you feel you cannot do by yourself? Team leads, would you be able to spare someone to help Didier with these tasks? None of them individually look particularly taxing for a Launchpad developer. cheers, jml _______________________________________________ Mailing list: https://launchpad.net/~launchpad-dev Post to : [email protected] Unsubscribe : https://launchpad.net/~launchpad-dev More help : https://help.launchpad.net/ListHelp
