Re: [Mailman-Developers] Two more DMARC mitigations

2014-06-15 Thread Joshua Cranmer 🐧
On 6/14/2014 5:15 PM, John Levine wrote: AOL and Yahoo both have OAUTH APIs, but they are not the same, and I see no likelihood that the APIs will converge, or that the next large webmail provider to DMARC us will be compatible with either. But everyone has a SUBMIT server. For other reasons,

Re: [Mailman-Developers] GnuPG support

2014-06-15 Thread John Levine
>Yes, except we don't want to use the mailing list maintainer keys, or >make him manually decrypt/encrypt every message. >This should be done automatically by Mailman, and we want to use the >mailing list keypair. Sympa does something like this with S/MIME. Incoming list messages are encrypted to

Re: [Mailman-Developers] GnuPG support - PGP - GPG encrypted mailing list

2014-06-15 Thread Stephen J. Turnbull
Sylvain Viart writes: > This question of distributing encrypted email to an unknown number > of subscribers is quite interesting/dangerous in the point of view > of securing the information. True, but this is out of scope for this list. I'm not saying you shouldn't discuss here if you want to

Re: [Mailman-Developers] GnuPG support - PGP - GPG encrypted mailing list

2014-06-15 Thread Sylvain Viart
Le 14/06/2014 19:49, Stanisław Findeisen a écrit : > http://security.stackexchange.com/questions/26544/gpg-encrypted-mailing-list-and-other-approaches-to-safe-communication > > "2. Do a relay." > Yes, except we don't want to use the mailing list maintainer keys, or > make him manually decrypt/encry

Re: [Mailman-Developers] GnuPG support

2014-06-15 Thread Stephen J. Turnbull
Stephen J. Turnbull writes: > The most recent code is presumably in Abilash's repo on Launchpad. > I'll find it for you later (have an appointment right now), but you > can look in the list of branches for the Mailman project on > launchpad.net. I think it's lp:~raj-abhilash1/mailman.client/g