Re: [Mailman-Users] Is mailman vulnerable to the httpoxy bug?

2016-07-20 Thread Mark Sapiro
On 07/19/2016 02:10 PM, Perry E. Metzger wrote: > https://httpoxy.org/ seems to impact any python program (among many > others) that runs under cgi. Does it cause trouble for mailman? What > is a reasonable mitigation? I am not an expert on httpoxy at all, but quoting from

Re: [Mailman-Users] Support for Internationalized Domain Names and Email Addresses

2016-07-20 Thread Mark Sapiro
On 07/20/2016 10:51 AM, Russ Housley wrote: > > My add addresses that include IDN or EAI have not worked. Subscriptions are > rejected. This is going to be tricky. Several things need to be considered. First, Modifications to the ValidateEmail() function in Mailman/Utils.py may be required. T

Re: [Mailman-Users] Support for Internationalized Domain Names and Email Addresses

2016-07-20 Thread Russ Housley
Steve: >> As far as I can tell, Mailman will not let me include an email >> address that uses IDN or EAI as a mail list recipient. Has anyone >> figure out how to use either one of these? > > It's up to Mark, but I doubt this will be done in a Mailman 2 release, > it's a bit tricky and seems lik

Re: [Mailman-Users] Is mailman vulnerable to the httpoxy bug?

2016-07-20 Thread 'lesleyb'
On Tue, Jul 19, 2016 at 05:25:00PM -0400, Jim Popovitch wrote: > On Tue, Jul 19, 2016 at 5:10 PM, Perry E. Metzger wrote: > > https://httpoxy.org/ seems to impact any python program (among many > > others) that runs under cgi. Does it cause trouble for mailman? What > > is a reasonable mitigation?

[Mailman-Users] Support for Internationalized Domain Names and Email Addresses

2016-07-20 Thread Stephen J. Turnbull
Russ Housley writes: > As far as I can tell, Mailman will not let me include an email > address that uses IDN or EAI as a mail list recipient. Has anyone > figure out how to use either one of these? It's up to Mark, but I doubt this will be done in a Mailman 2 release, it's a bit tricky and s