Re: Issues with NANOG mailing list operations and subscriptions

[Job Snijders]

Hi Sean, Will, group,

On Sun, Jan 17, 2021 at 03:01:22PM -0800, William Herrin wrote:
> On Sun, Jan 17, 2021 at 1:37 PM Sean Donelan  wrote:
> > Some people think its funny to ghost subscribe email addresses, and
> > the NANOG mailing list auomation doesn't catch them in the verification
> > process.
> 
> Hi Sean,
> 
> How is that possible? This is exactly what a correctly implemented
> confirmed opt-in procedure is designed to prevent.

Someone was kind enough to share a plausible theory outlining a
potentially fatal flaw in the current verification process. Some
auto-responders are (by accident) able to respond in such a way they end
up positively passing the automated verification process. 

I've shared some suggestions with the volunteers & nanog staff (who run
this mailing list) to improve the subscription verification process.
I am optimistic in the near future we'll be able to prevent this type of
situation from happening again.

Kind regards,

Job

ps. I'm one of the volunteers who support the NANOG staff in a technical
capacity to operate this mailman instance.

Re: Issues with NANOG mailing list operations and subscriptions

[William Herrin]

On Sun, Jan 17, 2021 at 1:37 PM Sean Donelan  wrote:
> Some people think its funny to ghost subscribe email addresses, and
> the NANOG mailing list auomation doesn't catch them in the verification
> process.

Hi Sean,

How is that possible? This is exactly what a correctly implemented
confirmed opt-in procedure is designed to prevent.

Regards,
Bill Herrin



-- 
Hire me! https://bill.herrin.us/resume/

Issues with NANOG mailing list operations and subscriptions

[Sean Donelan]

Some people think its funny to ghost subscribe email addresses, and 
the NANOG mailing list auomation doesn't catch them in the verification 
process.


Most of the time, if you send a note to the mailing list admins, they will 
quickly unsubscribe the address.  Although sometimes the problem email is 
obfuscated, and it takes them a while to eliminate it.


Also, auto-responders should NEVER respond to bulk mailing list messages.