Issue #98: Secure a little more the milter - pagure

Currently the milter only checks the FROM email and the Message-Id which makes it really easy for someone to post as someone else.

We should fix this by sending to each user an unique email to each person notified and checking if they replied to this email or tried to forge it.

Commit 3bcdaf62 relates to this ticket

With some more tests and debugging I think we can say that this is now working :)

Commit 3bcdaf62 relates to this ticket

Commit 3bcdaf62 relates to this ticket

Commit 3bcdaf62 relates to this ticket

Assignee

pingou

Tags

Blocking

None

Depending on

None

Priority

None

Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.