[Mailman-Users] USE_ENVELOPE_SENDER

[Barry Warsaw]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Does anybody set USE_ENVELOPE_SENDER to Yes these days?

I'm considering removing the equivalent of this from Mailman 3.0 and  
I'd like to know if that would be a hardship for anyone.  If you don't  
know what this value is (which in Mailman 2 lives in Defaults.py),  
then you probably won't miss its demise in Mailman 3.

This flag controls whether the Sender: header is considered before the  
From: header for purposes of trying to determine the email address of  
the message's author.  At one time in the distant past, this flag was  
added because it was observed that some MTAs put the RFC 2821 MAIL  
FROM value into this header, and this was considered less spoofable  
than the From: header.  I think these assumptions are outdated and  
this workaround is either unnecessary or hurts more than it helps.

BTW, the default value is No, which tells Mailman to use the From:  
header first.  I propose hardwiring that default value.

Let me know if this would cause you pain.

Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)

iEYEARECAAYFAkmPZuIACgkQ2YZpQepbvXHsbQCgl78AxhkBTbATQbV7jab+P8a+
F10An3skXX9Am4+BOk8gCqNaNiiVU1Vg
=Ddit
-----END PGP SIGNATURE-----