launchpad-dev team mailing list archive

[Jonathan Lange <jml@xxxxxxxxxxxxx>]

On Fri, Jun 25, 2010 at 1:06 PM, Didier Roche <didrocks@xxxxxxxxxx> wrote:
> Le vendredi 25 juin 2010 à 21:54 +1000, Robert Collins a écrit :
>> I like the idea of sending emails when important account settings are
>> changed: it helps with:
>>  - cross site attacks
>>  - apis that permit changing such settings
>>  - screen scraping via embedded browser instances
>>
>> and possibly more.
>>
>> Its also nonintrusive and straightforward, and we could include a
>> confirmation token in the email people get sent too, if we felt thats
>> needed.
>>
>> That is:
>> LP.me.addSSHKey(...)
>> -> email sent
>> <-202 ACCEPTED (please check your email and confirm via the token link in it)
>> Quickly shows the user 'please check email'
>> User clicks in the email, ssh key is enabled / disabled.
>
> Sounds a good way to avoid all the non-permitted apps and hacks to go
> away. Love it!
>
> Well, at first release, people will have 3/4 mails if they setup
> nothing:
> - ssh
> - gpg
> - coc
> - ppa
>

Hey everyone,

I've created a LEP for this, summarising the discussion and
articulating the constraints that bind any solution:
  https://dev.launchpad.net/LEP/ActivatingDevelopmentFromDesktop

Please review the LEP. Tomorrow, if no one has objected I will mark it approved.

If we assume that a post-hoc email is enough (and I think it is), then
we have the following work items:
 1. Send an email every time someone registers an SSH key
 2. Send an email every time someone registers a GPG key
 3. Send an email to the user, confirming they have signed the code of conduct
 4. Create and expose an API for adding SSH keys
 5. Create and expose an API for adding GPG keys
 6. Create and expose an API for signing the code of conduct
   * Perhaps this could be email? I don't care either way.
 7. Create and expose an API for creating a PPA

Didier, the more of these you can do yourself, the more quickly this
will get done. Are there any of these items you feel you cannot do by
yourself?

Team leads, would you be able to spare someone to help Didier with
these tasks? None of them individually look particularly taxing for a
Launchpad developer.

cheers,
jml