Mailing List Archive

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 12 May 2006, at 09:12, Michael Haubenwallner wrote:

> /!\ Current spam activities force a change in Collector security-
> policy:
> You need to be logged into your zope.org account to add issues and
> comment on existing issues

Is this a statement or a proposal? ;)

To be honest, having been on the receiving end of collector spam very
often myself on my own site I think it is a _good idea_ to prevent
anything becoming visible that anonymous users (or bots) type into
web forms. There are many ways to go about it, and for zope.org it
would probably be a good idea to say "you need an account and you
must log in".

On the other hand many people will argue that this creates an
obstacle and raises the bar for people who might be helpful by
providing feedback, yet can't be asked to log in. This argument has
always seemed unsolveable for me.

jens

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFEZEmXRAx5nvEhZLIRAsnYAKCL6YXhxpcAdhIW2U4MA34Y7RMqwwCfZoee
wUCFzZB2tNLPYf9yF3alWcI=
=/Rzo
-----END PGP SIGNATURE-----
_______________________________________________
Zope-web maillist - Zope-web@zope.org
http://mail.zope.org/mailman/listinfo/zope-web

--On 12. Mai 2006 09:38:47 +0100 Jens Vagelpohl <jens@dataflake.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> On the other hand many people will argue that this creates an obstacle
> and raises the bar for people who might be helpful by providing
> feedback, yet can't be asked to log in. This argument has always seemed
> unsolveable for me.
>

Other open source projects also require authentication before posting bugs.
It is in the interest of the supports *and* the person filing a bug to be
known to the system. So I am totally +1 to disallow anonymous postings.

-aj

--
ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany
Web: www.zopyx.com - Email: info@zopyx.com - Phone +49 - 7071 - 793376
E-Publishing, Python, Zope & Plone development, Consulting

Andreas Jung wrote:
>
>
> --On 12. Mai 2006 09:38:47 +0100 Jens Vagelpohl <jens@dataflake.org> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>>
>> On the other hand many people will argue that this creates an obstacle
>> and raises the bar for people who might be helpful by providing
>> feedback, yet can't be asked to log in. This argument has always seemed
>> unsolveable for me.
>>
>
> Other open source projects also require authentication before posting bugs.
> It is in the interest of the supports *and* the person filing a bug to
> be known to the system. So I am totally +1 to disallow anonymous postings.

Agreed. +1

Jim

--
Jim Fulton mailto:jim@zope.com Python Powered!
CTO (540) 361-1714 http://www.python.org
Zope Corporation http://www.zope.com http://www.zope.org
_______________________________________________
Zope-web maillist - Zope-web@zope.org
http://mail.zope.org/mailman/listinfo/zope-web