On 10/04/2013 05:34 PM, DaB. wrote: > Now two question: Why does WMF didn’t notice the bounce and why did WMF > not use my SUL-mail-address? And following question 1: How many other > bounces happened without notice?
Your second question is easy: the mail was sent to the email address associated with the exposed account. I expect you have that email address still on the project that was on the list, so this is where the email was sent. For your first question: we would notice mail being rejected by the MTA, but not a bounce that came in after the fact. gmx.de did accept the mail for delivery, but sent a bounce asynchronously. Since the from: of the email points to OTRS, and OTRS rejects bounces to avoid starting bounce loops, it got lost. Sadly, we were under severe time pressure to warn as many users as possible as quickly as possible, and it was not practical to construct a mail system that was robust enough to handle edge cases. Since there was a second layer of protection (ending sessions and forcing password changes) that would come into play even for editors that had invalid or no email set, this was viewed as the right compromise to avoid delaying warning users by days. It's of course preferable if editors get the email before they wonder why their session timed out (because, as you yourself experienced, it's a little confusing to end up being forced to change your password without warning) -- but safeguarding the security of users quickly has priority. -- Marc _______________________________________________ Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/toolserver-l Posting guidelines for this list: https://wiki.toolserver.org/view/Mailing_list_etiquette
