Stephen J. Turnbull wrote:
Andrew Hodgson writes:
Require moderator approval for subscribing.
I don't think this would help the issue. What I am seeing here is > users signing up through Postorius using the sign up option which > then creates an account in Django (but not Mailman).
Ah, so "fake" == "account in Django but no user in Mailman"?
Yes.
I don't have time to look at it, so take this with a grain of salt, but I don't think they are passing the email confirmation. If they were, they would show up in Mailman.
Actually I did confirm the same to this list later on, the accounts are indeed not passing email confirmation.
I think this would be simple enough to deal with (not trivial, so I'm not making any promises except to try adding it to the GSoC ideas page -- that should be enough to clarify whether there are any "annoyance to 'real' users" issues, and we move forward from there if there aren't). Basically, Postorius should notify Mailman that there is a *pending* user in Django, and if there's no confirmation by a deadline, remove that user. This requires a bunch of infrastructure like a table of "pending" users, callbacks for the deletion, etc, but I don't see why it would be conceptually difficult. (This combination is why I think it would be a good GSoC task)
Sure. I would rather go this route rather than use captchas at this stage, though right now my Cron job running once a week is sufficient.
Thanks. Andrew.