[Mailman-Developers] Postorius and verified email addresses

[Barry Warsaw]

On Apr 07, 2016, at 12:26 AM, Simon Hanna wrote:

>Short version: it supports both external (social) and internal (django) auth
>systems and offers options to combine/switch between them . Allauth provides
>Signals that I used to verify the addresses in Mailman.

I think we have to decide how and where addresses will be verified.  Are they
going to be via confirmations emailed by core or via Postorius?

I think the core has to support emailed confirmation messages because
Postorius is technically an optional component.  So if a site were to build
their own REST front-end, they'd at least want to allow the core to handle
email verifications without having to build that into their front-end.

That doesn't necessarily prevent Postorius from doing it, and when used with
Persona, we see how nicely that can work.  It's also of course possible that
any 3rd party front-end will have its own way of verifying email addresses.

The other thing to think about is that the core already must know how to talk
to the outgoing MTA, to provide proper reputation services, signing, etc.  I
don't know that we want to make site admins have to configure that in two
places, and we almost certainly don't want Postorius to send out emails
directly.

Cheers,
-Barry