Re: [ZWeb] Collector spam

2006-05-12 Thread Jens Vagelpohl

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On 12 May 2006, at 09:12, Michael Haubenwallner wrote:

/!\ Current spam activities force a change in Collector security- 
policy:
You need to be logged into your zope.org account to add issues and  
comment on existing issues


Is this a statement or a proposal? ;)

To be honest, having been on the receiving end of collector spam very  
often myself on my own site I think it is a _good idea_ to prevent  
anything becoming visible that anonymous users (or bots) type into  
web forms. There are many ways to go about it, and for zope.org it  
would probably be a good idea to say "you need an account and you  
must log in".


On the other hand many people will argue that this creates an  
obstacle and raises the bar for people who might be helpful by  
providing feedback, yet can't be asked to log in. This argument has  
always seemed unsolveable for me.


jens

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFEZEmXRAx5nvEhZLIRAsnYAKCL6YXhxpcAdhIW2U4MA34Y7RMqwwCfZoee
wUCFzZB2tNLPYf9yF3alWcI=
=/Rzo
-END PGP SIGNATURE-
___
Zope-web maillist  -  Zope-web@zope.org
http://mail.zope.org/mailman/listinfo/zope-web


Re: [ZWeb] Collector spam

2006-05-12 Thread Andreas Jung



--On 12. Mai 2006 09:38:47 +0100 Jens Vagelpohl <[EMAIL PROTECTED]> wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On the other hand many people will argue that this creates an  obstacle
and raises the bar for people who might be helpful by  providing
feedback, yet can't be asked to log in. This argument has  always seemed
unsolveable for me.



Other open source projects also require authentication before posting bugs.
It is in the interest of the supports *and* the person filing a bug to be 
known to the system. So I am totally +1 to disallow anonymous postings.


-aj

--
ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany
Web: www.zopyx.com - Email: [EMAIL PROTECTED] - Phone +49 - 7071 - 793376
E-Publishing, Python, Zope & Plone development, Consulting


pgpCNSPF387QL.pgp
Description: PGP signature
___
Zope-web maillist  -  Zope-web@zope.org
http://mail.zope.org/mailman/listinfo/zope-web


Re: [ZWeb] Collector spam

2006-05-12 Thread Jim Fulton

Andreas Jung wrote:



--On 12. Mai 2006 09:38:47 +0100 Jens Vagelpohl <[EMAIL PROTECTED]> wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On the other hand many people will argue that this creates an  obstacle
and raises the bar for people who might be helpful by  providing
feedback, yet can't be asked to log in. This argument has  always seemed
unsolveable for me.



Other open source projects also require authentication before posting bugs.
It is in the interest of the supports *and* the person filing a bug to 
be known to the system. So I am totally +1 to disallow anonymous postings.


Agreed. +1

Jim

--
Jim Fulton   mailto:[EMAIL PROTECTED]   Python Powered!
CTO  (540) 361-1714http://www.python.org
Zope Corporation http://www.zope.com   http://www.zope.org
___
Zope-web maillist  -  Zope-web@zope.org
http://mail.zope.org/mailman/listinfo/zope-web