Dnia 16.06.2022 o godz. 11:38:00 Dan Mahoney via mailop pisze: > > Can someone please explain to me how/why a google group manager is able to > just add any email address and send to it? Considering all the > authentication they're requiring, this seems like a gaping hole in any > kind of security.
Simply. There's an option in the Google Groups web UI to do that. I do it routinely on a small group I'm managing. It is a closed group and people are added to that group only when they explicitly ask me to be added, and they cannot add themselves via eg. web interface. So there's no sense in requiring additional confirmation from them, I just add them directly. There's a warning when you use that option which says that you should never do it without user's consent and that your account may be terminated if you use that feature for spamming - but these spammers definitely don't care. However, I am not sure if Google Groups sends an email to the user who is being added informing him/her about that if you do not enter any "welcome message" in the appropriate field when adding users. In my opinion, for users who are added without being asked for confirmation it definitely should send such an informational message, and it should be impossible to turn it off. But I don't know how does it look like in reality. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub." _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
