Hi Ricardo,
On Fri, 2021-04-16 at 16:23 +0200, Ricardo Wurmus wrote:
Sorry, that is my fault. The Sign Up page is used to create an (django)
"account" on the site. Which you can then connect to your email address
with which you are subscribed to a list. It was constantly abused and
caused a constant stream of "sign up" emails to random addresses.
It isn't technically necessary for subscribing, each list info page has
a subscribe form and you can subscribe by email, but it cannot easily
be configured out. I shared the following with the admin team, but
should probably have shared with this list to make people aware. Also,
if you do know mailman3 and django, then please let us know and we can
work on this together.
> Hi admin people,
>
> On Wed, 2021-04-14 at 22:22 +0000, root(a)lists.gnu.tools wrote:
> > Internal Server Error: /accounts/login/
>
> My apologies, my fault. We see a lot of "account creation" emails
> (and
> bounces) from the Django Sign Up page. I was trying to disable it.
>
> Turns out that isn't possible :{
>
https://gitlab.com/mailman/django-mailman3/-/issues/23
>
> So I did the hack described in that bug report for now.
> (Which is horrible because it will be overwritten once we upgrade
> mailman3...) But for now I think it is the best short term solution.
>
> The only issue is that you then cannot unsubscribe from the website
> (because you first need to create an account for that...)
> You can still subscribe/unsubscribe by email though.
> And subscribing from the webpage also still works.
>
> Cheers,
>
> Mark