<?xml version="1.0" encoding="UTF-8"?> 
<?xml-stylesheet href="https://dev.horde.org/themes/horde//default/feed-rss.xsl" type="text/xsl"?> 
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> 
 <channel> 
  <title>identity creation auditing</title> 
  <pubDate>Thu, 09 Apr 2026 17:42:25 +0000</pubDate> 
  <link>https://bugs.horde.org/ticket/6944</link> 
  <atom:link rel="self" type="application/rss+xml" title="identity creation auditing" href="https://bugs.horde.org/ticket/6944/rss" /> 
  <description>identity creation auditing</description> 
 
   
   
  <item> 
   <title>It would be cool if the identity creation confirmation email</title> 
   <description>It would be cool if the identity creation confirmation email...

- was only invoked when creating an identity with a non-local From / Reply-to

- could be directed to central administrative user



Spammy users often control the addresses they use as From and Reply-to, so we don&#039;t gain a lot by having them confirm their spammy yahoo account.  



Maybe there could be a web based admin tool to approve / deny identities.. something where the identity in question was displayed to the admin, so they could better judge whether the id was legit.</description> 
   <pubDate>Tue, 17 Jun 2008 22:49:17 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6944#t46618</link> 
  </item> 
   
  <item> 
   <title>Not to be too picky, but sure, it&#039;d be cool - any suggestion</title> 
   <description>Not to be too picky, but sure, it&#039;d be cool - any suggestions on how to do it in a way that doesn&#039;t make Horde overly complicated?</description> 
   <pubDate>Wed, 18 Jun 2008 01:37:51 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6944#t46620</link> 
  </item> 
   
  <item> 
   <title>I think that our first pass would be to either...

- redirec</title> 
   <description>I think that our first pass would be to either...

- redirect the identity confirmation messages to a central address (perhaps Horde&#039;s $conf[&#039;problems&#039;][&#039;email&#039;])

- only invoked identify confirmation messages if the Reply-to or From contained a domain other than that server&#039;s &quot;maildomain&quot;



</description> 
   <pubDate>Wed, 18 Jun 2008 20:13:28 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6944#t46647</link> 
  </item> 
   
  <item> 
   <title>1. we should add a &quot;allowed_domains&quot; regexp for addresses th</title> 
   <description>1. we should add a &quot;allowed_domains&quot; regexp for addresses that don&#039;t trigger validation (admins will be responsible for ensuring that their regexps don&#039;t let too much in of course)



2. I&#039;m okay with adding a &quot;central_validation_email&quot; that if set would get all confirmation requests.</description> 
   <pubDate>Mon, 30 Jun 2008 18:58:42 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6944#t47029</link> 
  </item> 
   
  <item> 
   <title>This is a Horde/Core feature request.</title> 
   <description>This is a Horde/Core feature request.</description> 
   <pubDate>Tue, 06 Dec 2011 04:53:53 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6944#t69310</link> 
  </item> 
   
   
 
 </channel> 
</rss> 
