* DONE Email::Valid does not accept UTF-8 emails adresses (e.g., peace@☮.net). LDAP doesn't allow UTF-8 in the DNs anyway, so maybe convert the domains/emails to Punycode internally? * TODO What to do when a user wants to add a domain? Is it worth it to send a confirmation e-mail? * DONE Better check for existing lists (commands). - When adding a new alias/mailbox 'test', check for existing alias/mailbox 'test', and list 'test'. - When adding a new alias/mailbox 'test-request', check for existing alias/mailbox 'test-request', list 'test-request' *and* list 'test'. (The same for other list commands.) - When adding a new list 'test', check for existing alias/mailbox/list 'test', 'test-request',... - (Lists of the form 'test-request' are forbidden); * CANCELED Check for cycles when creating new aliases? CLOSED: [2012-09-29 Thu 16:12] - CLOSING NOTE [2012-09-29 Thu 16:12] \\ 1/ It is impossible to do it properly since the authenticated user may not have full read access on the graph. 2/ Cycles may also be created by catch-alls or mailbox forwarding, or even externally with another server. 3/ Postfix warns the administrator with a "unreasonable virtual_alias_maps map nesting for test-loop1@fripost.org" in the logs if there's a loop in the alias resolution. * DONE Write a script to check every runmode against the W3 validator. (Cf. cgiapp_postrun); * DONE Use FastCGI. References - http://www.cgi-app.org/index.cgi?FastCGI - http://stackoverflow.com/questions/11771564/nginx-fastcgi-configuration-for-cgiapplication-app * TODO Use HTML::Template::Pro. Not sure it's really worth it, though. * DONE Escape reserved characters in URLs: http://mark.stosberg.com/blog/2010/12/percent-encoding-uris-in-perl.html * CANCELED How should we encode the URL for internationalized domain names? Punicode vs. unicode vs. HTML entities? CLOSED: [2012-09-27 Thu 00:03] - CLOSING NOTE [2012-09-27 Thu 00:03] \\ It's up to the browser (Firefox supports unicode in URLs). * CANCELED Forbid UTF8 in the domain part of lists? (Test if the list managers support it at least.) CLOSED: [2012-09-27 Thu 03:38] - CLOSING NOTE [2012-09-27 Thu 03:38] \\ Mailman and Schleuder do not support IDNs, but we convert the list name into punicode first. * DONE Give the right for domain postmasters to grant the right to create aliases and lists. * TODO Give the right to appoint co owners (for list and aliases). * TODO Make every service use Kerberos, and remove the passphrase on their GPG private keys. * DONE Check list names against mailman's and schleuder's regexps? * TODO What to do when a list creation fails? Set up a new service to clean out the pending lists and domains if they have not been fixed within 24h (daemon). * TODO Automatically generated passwords.