legalese / legalese.github.io

Static assets for legalese.com
https://legalese.com/
70 stars 27 forks source link

Request <username>@legalese.io email addresses #107

Closed virgil closed 8 years ago

virgil commented 8 years ago

I wish to create a Legalese company page on LinkedIn, Crunchbase, etc. To do so I need a virgil@legalese.io email address.

Somewhat related, I've noticed the legalese.com, although it's registered, is currently not in use.

sebdeckers commented 8 years ago

/cc @wabisabiyo

mengwong commented 8 years ago

i don't know if @wabisabiyo has owner access to Google Apps so i'm going to go ahead and pick this up.

mengwong commented 8 years ago

there are two ways to do this – as a mailing list with only one member, or as an alias.

mailing lists are archived and can be read by other project members.

aliases are not archived; messages cannot be seen by anyone other than the recipient.

which approach would be more valuable to the project?

virgil commented 8 years ago

Perhaps surprisingly, I like the idea of single-member mailing lists. Employees just accept that anything sent through legalese.io is fair-game to be indexed by the collective knowledge base.

mengwong commented 8 years ago

that would help with our CRM also because if somebody gets hit by a bus the other people can pick up where they left off.

mengwong commented 8 years ago

and if somebody goes on vacation, other people can be added to the mailing list.

mengwong commented 8 years ago

i would do mengwong@legalese.io that way but for legacy reasons that email address is already a firehose of confidential Adobe Echosign PDFs. Maybe I can fix that in the future.

mengwong commented 8 years ago

we would have to think hard about "forgot password" security considerations, because email is used as identity nowadays. so there is a privilege escalation path from somebody being on the project, to having access to the mailing list archives, to being able to identity-theft you, and then deregister the legalese.com domain.

mengwong commented 8 years ago

Hmm. How would a single-member mailing list send email as that identity? Maybe in practice this doesn't matter because the world only sends to the address, and doesn't care about messages coming from it. Let's try it and if this doesn't work we can switch back to an alias.

Even with an alias there would be some amount of overhead in setting up the ability to send mail from that address.

sebdeckers commented 8 years ago

Spoof it on outgoing emails, or does the domain have DKIM and such? On Thu, 7 Apr 2016 at 4:21 PM, Meng Weng Wong notifications@github.com wrote:

Hmm. How would a single-member mailing list send email as that identity? Maybe in practice this doesn't matter because the world only sends to the address, and doesn't care about messages coming from it. Let's try it and if this doesn't work we can switch back to an alias.

Even with an alias there would be some amount of overhead in setting up the ability to send mail from that address.

— You are receiving this because you commented.

Reply to this email directly or view it on GitHub https://github.com/legalese-io/legalese-io.github.io/issues/107#issuecomment-206755980

mengwong commented 8 years ago

well, virgil has received my email, so our little mailing list hack seems to work for the purpose originally specified in the issue description, so i'm going to close the issue, unless @virgil needs anything more?