Decommission the security-press mailing list

Created on 13 November 2024, about 1 month ago

Problem/Motivation

We made this list a while ago when a lot of press inquiries were coming in and not everyone wanted to see them. We haven't used it for that purpose in a long time.

Steps to reproduce

Visit https://www.drupal.org/about/media-kit/contacts β†’ and https://lists.drupal.org/mailman/listinfo/security-press and see the existence of the email.

Proposed resolution

1. Set that email address to bounce with a helpful message. I guess something like a pointer to mail security@drupal.org about security issues or contact https://www.drupal.org/about/media-kit/contacts β†’ for normal press issues.
2. Remove the address from https://www.drupal.org/about/media-kit/contacts β†’

Remaining tasks

Confirm this is what we want to do.
Do it.

πŸ“Œ Task
Status

Active

Component

Other

Created by

πŸ‡ΊπŸ‡ΈUnited States greggles Denver, Colorado, USA

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @greggles
  • πŸ‡ΊπŸ‡ΈUnited States drumm NY, US

    This will likely need to wait a few days as we are upgrading the VM that handles @drupal.org incoming email.

    It will actually be easier to forward the messages. Is the volume of spam this address receives something that’s okay to forward to security@drupal.org? Otherwise, we could forward it to an @association.drupal.org Gmail account and have that do spam filtering and forward or auto-reply from there.

  • πŸ‡ΊπŸ‡ΈUnited States greggles Denver, Colorado, USA

    In the last 2 weeks there were a few dozen messages. I guess gmail spam filtering handles that volume pretty well?

    I'd also be fine with it getting deleted and sending an 'address not found' error response. As I hinted in the issue summary and mentioned in slack, this gets an extremely low volume of legitimate mail (I can't remember when the last real mail was - it was years ago, maybe a decade ago). The list archives seem corrupted, but seem to confirm several years of the last 10 it did not have any messages https://lists.drupal.org/mailman/private/security-press/

Production build 0.71.5 2024