Page MenuHomePhabricator

Implement proper AAA for lists.wikimedia.org (mailman)
Open, MediumPublic

Description

Spin off from https://blog.wikimedia.org/2015/11/12/mailman-security-incident/

The security model of mailman was maybe good enough 20 years ago, but is currently very much out of date. AAA stands for Authentication, Authorization and Accounting. In the case of lists:

  • Authentication: Currently I have dozens of lists I am subscribed to with passwords, for admins of lists we have different passwords and these are shared among admins. I should just be able to login with OATH/LDAP or the likes
  • Authorization: If we know who is who we can assign roles (member, moderator, admin, maybe more) to people
  • Accounting: This is for bonus points: Who did what? For example who allowed/denied an email in moderation

I'm pretty sure this isn't available for mailman yet so this isn't going to be easy at all. Two possible approaches:

  • Implement this in Mailman (upstream)
  • Switch to different software with similar functionality

Both major undertakings.

Related Objects

StatusSubtypeAssignedTask
OpenNone
InvalidNone
OpenNone
ResolvedNone
ResolvedNone
ResolvedLadsgroup
ResolvedMarostegui
ResolvedNone
ResolvedLegoktm
DeclinedLadsgroup
Resolvedbd808
ResolvedLadsgroup
Resolvedbd808
ResolvedLegoktm
OpenNone
ResolvedDzahn
ResolvedLegoktm
ResolvedLegoktm
ResolvedLegoktm
ResolvedLegoktm
ResolvedLadsgroup
ResolvedLegoktm
ResolvedLadsgroup
ResolvedMarostegui
OpenLadsgroup

Event Timeline

Multichill raised the priority of this task from to Needs Triage.
Multichill updated the task description. (Show Details)
Multichill added subscribers: Multichill, Akoopal.
jeremyb-phone renamed this task from Implement proper AAA for lists.wikimedia.org (mailman to Implement proper AAA for lists.wikimedia.org (mailman).Jan 30 2016, 4:32 PM
jeremyb-phone updated the task description. (Show Details)
jeremyb-phone added a subscriber: jeremyb.
Legoktm added a subscriber: Legoktm.

The first two As will definitely be addressed by mailman3. I'm not sure about Accounting, but that was bonus points anyways. I would encourage you to test out the mailman3 test installation and file specific tasks for missing features.