search

GENI-NSF / geni-portal

A UI for a GENI clearinghouse
Other
3 stars 8 forks source link

portal "project join" requests should not impersonate an experimenter's e-mail address #879

Closed ahelsing closed 9 years ago

ahelsing commented 9 years ago

It's problematic current e-mail practice for a site to impersonate e-mail addresses that belong to another site. Spam blocking tools such as SPF, which are used by many domains including bbn.com, will cause other sites to reject e-mail we send them which impersonates users from SPF-using domains, and there's nothing we can do to get those e-mails accepted.

Instead of impersonating the experimenter's address when sending project join requests, do what many ticketing systems do and impersonate the experimenter's name but use a legitimate portal e-mail address. For instance, set:

From: "Chaos Golubitsky (via the GENI Portal)" <www-data@gpolab.bbn.com>
Reply-to: Chaos Golubitsky <chaos@bbn.com>

Imported from trac ticket #879, created by chaos on 11-05-2013 at 19:03, last modified: 12-17-2013 at 13:53

ahelsing commented 9 years ago

Fixed in join-this-project, ask-for-project, invite-to-project, and invite-to-geni

Trac comment by phelinek on 12-16-2013 at 17:29

ahelsing commented 9 years ago

Missed do-upload-project-members.php

Trac comment by ahelsing on 12-17-2013 at 13:36