launchpad-dev team mailing list archive

[Didier Roche <didrocks@xxxxxxxxxx>]

On lun., 2010-07-05 at 13:26 +0100, Jonathan Lange wrote:
> On Fri, Jun 25, 2010 at 1:06 PM, Didier Roche <didrocks@xxxxxxxxxx> wrote:
> > Le vendredi 25 juin 2010 à 21:54 +1000, Robert Collins a écrit :
> >> I like the idea of sending emails when important account settings are
> >> changed: it helps with:
> >>  - cross site attacks
> >>  - apis that permit changing such settings
> >>  - screen scraping via embedded browser instances
> >>
> >> and possibly more.
> >>
> >> Its also nonintrusive and straightforward, and we could include a
> >> confirmation token in the email people get sent too, if we felt thats
> >> needed.
> >>
> >> That is:
> >> LP.me.addSSHKey(...)
> >> -> email sent
> >> <-202 ACCEPTED (please check your email and confirm via the token link in it)
> >> Quickly shows the user 'please check email'
> >> User clicks in the email, ssh key is enabled / disabled.
> >
> > Sounds a good way to avoid all the non-permitted apps and hacks to go
> > away. Love it!
> >
> > Well, at first release, people will have 3/4 mails if they setup
> > nothing:
> > - ssh
> > - gpg
> > - coc
> > - ppa
> >
> 
> Hey everyone,
> 
> I've created a LEP for this, summarising the discussion and
> articulating the constraints that bind any solution:
>   https://dev.launchpad.net/LEP/ActivatingDevelopmentFromDesktop
> 
> Please review the LEP. Tomorrow, if no one has objected I will mark it approved.
> 
> If we assume that a post-hoc email is enough (and I think it is), then
> we have the following work items:
>  1. Send an email every time someone registers an SSH key
>  2. Send an email every time someone registers a GPG key
>  3. Send an email to the user, confirming they have signed the code of conduct
>  4. Create and expose an API for adding SSH keys
>  5. Create and expose an API for adding GPG keys
>  6. Create and expose an API for signing the code of conduct
>    * Perhaps this could be email? I don't care either way.
>  7. Create and expose an API for creating a PPA
> 
> Didier, the more of these you can do yourself, the more quickly this
> will get done. Are there any of these items you feel you cannot do by
> yourself?

I have a lot to do on other area for Ubuntu for alpha3 but I think what
I can do is:
4/5/6/7 if someone help me on either the SSH or GPG write mode part by
pair-programming.
I have totally no confidence about having the time to send an email
everytime someone register something. However, I think that if someone
is doing one, I can dupe and adapt that for GPG/CoC

> 
> Team leads, would you be able to spare someone to help Didier with
> these tasks? None of them individually look particularly taxing for a
> Launchpad developer.

So yeah, I think that if someone can helps me for:
1 - sending an email on either SSH or GPG key
2 - create and expose an API for adding SSH or GPG key,

I feel confident to be able to duplicate that for other part of the
code.
Just keep in mine that I won't be there this week.

Thanks a lot!
Cheers,
Didier