Page MenuHomePhabricator

Delete email addresses with privileged @domain names from mailing lists at offboarding
Open, MediumPublic

Description

As described in T248126: Please decom reading-wmf mailing list this is a request for a process enhancement to delete email addresses with privileged domain names (e.g., @wikimedia.org) from mailman at offboarding. This would reduce the odds of account compromise and otherwise misuse on the mailmain lists.

This probably ought to also apply to specific contractor work email addresses that aren't part of the set of well known privileged domain names, too, although that's potentially more complicated and harder to track - the task submitter isn't sure if that's an issue at present.

There may be complementary actions like resetting the list administrator password if the user was also an administrator of a list, although that's even more complicated process wise, perhaps.

Event Timeline

@akosiaris This seems unrelated to your recent proposal for mailman tooling, but could it be an included, secondary use case?

Yes the same API could be used as well so we could accommodate it.

I'm not sure where the canonical offboarding documentation is, but we already have a script for mailman2 to remove someone from all lists. mailman3 has a REST API, so we could write a cookbook or something for it.