View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] |
ID | Project | Category | View Status | Date Submitted | Last Update |
0000930 | ClearOS | app-zarafa - Zarafa Engine | public | 2013-01-10 13:14 | 2013-04-26 19:41 |
|
Reporter | user2 | |
Assigned To | user2 | |
Priority | normal | Severity | tweak | Reproducibility | N/A |
Status | closed | Resolution | fixed | |
Platform | | OS | | OS Version | |
Product Version | | |
Target Version | 6.4.0 Beta 2 | Fixed in Version | 6.4.0 Beta 2 | |
|
Summary | 0000930: Disable always_send_delegates by default, expose option in UI |
Description | It is quite common with users in our target market to send mail on behalf of other users. With careful precautions, it is possible to somewhat control who can send mail for a particular "from address". Both "Domain Keys" and "SPF" would be recommended for such a scenario. But even with these precautions, this type of authentication for the "from address" is not foolproof. In some circles, this type of authentication scheme would be considered laughable. Digital signatures with certificates is the proper way to implement "from address" protection.
For most of our users, this type of "from address" protection is neither wanted or necessary, so it should be disabled by default. In /etc/zarafa/spooler.cfg:
always_send_delegates = no
The option to enable the feature should be available in the GUI. |
Tags | No tags attached. |
|
Attached Files | |
|