[Mailman-Users] AES encryption and Resent-Message-ID

2012-06-18 Thread Lindsay Haisley
Here are a few tidbits pursuant to putting an encrypted copy of a list post recipient in a "Resent-Message-ID" header, as Stephen Turnbull suggested. There are four parts: 1. A patch to SMTPDirect.py 2. A secret key entry in mm_cfg.py 3. A utility, ~mailman/bin/aes_genkey, to manage key gene

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Lindsay Haisley
On Mon, 2012-06-18 at 17:58 -0500, Lindsay Haisley wrote: > FWIW, pursuant to Stephen's comments re. using encryption rather than > hashing for passing recipient addresses in headers, I've attached a > short Python script which puts short strings of data, such as an email > address, into an AES cip

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Lindsay Haisley
On Mon, 2012-06-18 at 14:59 -0400, David wrote: > In terms of privacy, as list admins we already have the member's > information. All we are doing in this case is helping that member stop > receiving messages they obviously no longer wish to receive. This is > clearly not an invasion of privacy (es

Re: [Mailman-Users] Personalisation: how long does it take?

2012-06-18 Thread Terry Earley
We are using postfix on the same server as our MTA. Terry On Mon, Jun 18, 2012 at 4:32 PM, Andrew Hodgson wrote: > Terry Earley wrote: > > >I should also mention that this test was with DKIM signing and the number > of members was between 2100 and 2200. > > Thanks, something is wrong with the se

Re: [Mailman-Users] Personalisation: how long does it take?

2012-06-18 Thread Brad Knowles
On Jun 18, 2012, at 3:32 PM, Andrew Hodgson wrote: > Thanks, something is wrong with the setup or the VPS I use is not running > efficiently. What MTA are you using? I am on Exim4. Postfix has some out-of-the-box settings that make it particularly well suited for the role of being an MTA for a

Re: [Mailman-Users] Personalisation: how long does it take?

2012-06-18 Thread Andrew Hodgson
Terry Earley wrote: >I should also mention that this test was with DKIM signing and the number of >members was between 2100 and 2200. Thanks, something is wrong with the setup or the VPS I use is not running efficiently. What MTA are you using? I am on Exim4. Andrew.

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Thomas Hochstein
Lindsay Haisley schrieb: > So what would be the implications of hacking an extra header into > outgoing posts on lists for which personalization is enabled, say > "X-Subdata", with said header containing a hash of the subscriber > address to which the post is directed? AOL ist actually recommendi

Re: [Mailman-Users] Personalisation: how long does it take?

2012-06-18 Thread Terry Earley
I should also mention that this test was with DKIM signing and the number of members was between 2100 and 2200. Terry On Mon, Jun 18, 2012 at 2:24 PM, Terry Earley wrote: > Our own experience sending to 2100 users is that without personalization a > message went out in 2 seconds. When we applie

Re: [Mailman-Users] Personalisation: how long does it take?

2012-06-18 Thread Terry Earley
Our own experience sending to 2100 users is that without personalization a message went out in 2 seconds. When we applied personalization and VERP, that test message went out in 120 seconds, which was acceptable to us. Obviously, there are many factors affecting speed of delivery. Personalization

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Brad Knowles
On Jun 18, 2012, at 12:06 PM, Larry Stone wrote: > And the problem that I'm trying to fix is that their user has violated MY TOS > regarding reporting list mail (that they subscribed to) as spam. That AOL > sent their Feedback Loop message to me is therefore part of the violation of > my terms.

[Mailman-Users] Personalisation: how long does it take?

2012-06-18 Thread Andrew Hodgson
Hi, Just wondering how long in the real world it takes to get all messages from a personalised list sent out and processed by the MTA on the same machine as Mailman? List is around 750 members. I did run this once and it took over 10 minutes to get all the messages delivered through the MTA,

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Lindsay Haisley
On Mon, 2012-06-18 at 12:05 -0700, Brad Knowles wrote: > Uh, trust me -- you really don't want to get into the discussion of > creating new SMTP protocol enhancements. I was on the DRUMS WG. You > really, really don't want to go there. > VERP is not an SMTP protocol, but a MTA property supported

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Larry Stone
On Sun, 17 Jun 2012, Brad Knowles wrote: In fact, when you sign up for the AOL Feedback Loop (as I did years ago for the lists hosted at python.org), the instructions explicitly state that you may not use any information they give you to determine who the affected user is -- they're simply tel

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread David
On Mon, Jun 18, 2012 at 2:44 PM, Lindsay Haisley wrote: > On Mon, 2012-06-18 at 13:04 -0400, Tanstaafl wrote: > > On 2012-06-18 12:22 PM, Lindsay Haisley wrote: > > > Doing this as a custom hack helps. If this were implemented as a > > > Mailman standard option then word might indeed get back to

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Lindsay Haisley
On Mon, 2012-06-18 at 13:04 -0400, Tanstaafl wrote: > On 2012-06-18 12:22 PM, Lindsay Haisley wrote: > > Doing this as a custom hack helps. If this were implemented as a > > Mailman standard option then word might indeed get back to them about > > it. Using Resent-Message-ID as a header name is

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Lindsay Haisley
On Tue, 2012-06-19 at 02:11 +0900, Stephen J. Turnbull wrote: > Lindsay Haisley writes: > > Why would, say, hashlib.md5(recip).hexdigest() be any more or less > > detectable than a reversible encryption? > > Because once the idea becomes public, anybody can check the nonesense > strings in your

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Stephen J. Turnbull
Lindsay Haisley writes: > Good suggestion. I assume that Mailman never inserts > "Resent-Message-ID" into posts, is that correct? Currently it doesn't, it seems, but there have been proposals to make it do so (related to DKIM IIRC). However, if and when it does, it wouldn't hurt to add your o

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Lindsay Haisley
On Mon, 2012-06-18 at 10:01 -0700, Brad Knowles wrote: > > IMHO, AOL's days on this planet are numbered. They'll go the way of > > Compuserve :) > > You mean that they'll get bought -- by AOL? ;-) > The irony is not lost :) The snake eats itself tail-first until it disappears. They'll probabl

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Tanstaafl
On 2012-06-18 12:22 PM, Lindsay Haisley wrote: Doing this as a custom hack helps. If this were implemented as a Mailman standard option then word might indeed get back to them about it. Using Resent-Message-ID as a header name is a clever idea. I'd also argue that since this is not AOL speci

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Lindsay Haisley
On Mon, 2012-06-18 at 17:03 +0900, Stephen J. Turnbull wrote: > Lindsay Haisley writes: > > > So what would be the implications of hacking an extra header into > > outgoing posts on lists for which personalization is enabled, say > > "X-Subdata", with said header containing a hash of the subscr

Re: [Mailman-Users] AOL redacts user addresses even with VERP and full personalization enabled

2012-06-18 Thread Stephen J. Turnbull
Lindsay Haisley writes: > So what would be the implications of hacking an extra header into > outgoing posts on lists for which personalization is enabled, say > "X-Subdata", with said header containing a hash of the subscriber > address to which the post is directed? I would use Resent-Messa