On Mon, 9 Mar 2020 at 14:20, Mattia Verga <mattia@fedoraproject.org> wrote:
Just my thoughts:

> Hi all,
>
> This is the first email with trying to better prioritize our backlog of
> ticket ( https://pagure.io/fedora-infrastructure/issues ).
>
> So let's look at 5 tickets and rate them using the following categories :
> * low-trouble, medium-trouble, high-trouble
> * low-gain, medium-gain, high-gain
>
> #8455 Move mailman to newer release of Fedora or CentOS -
> https://pagure.io/fedora-infrastructure/issue/8455
> Trouble : high
> Gain : high
This one blocks other two issues and as reported in comments the currently deployed version suffers of at least one XSS leak, so I would mark as really high priority.
But if we have to put very high effort to fix it, it could be better to make the effort to upgrade to mailman3 that is actively developed.
>


The effort is upgrading to mailman3 which is actively developed.. getting it and everything related to it packaged into RPMs is the problem.

 
> #7919 Fix fas fedmsg sending in openshift -
> https://pagure.io/fedora-infrastructure/issue/7919
> Trouble : ?
> Gain : low
fas is being replaced, I don't think it worths to have it fixed.
>

The issue is that we have to manually update password on various servers by telling a box to update its FAS db's. It is more a 'how much do you want to deal with people complaining they can't login to various services after updating keys or passwords'.
 
>
> Let's also use this thread to ask questions and clarifications if needed.
> Also if you have any ideas or feedback on how to improve that process I am
> happy to hear about it :-).
>
>
> Thanks
> Clément
_______________________________________________
infrastructure mailing list -- infrastructure@lists.fedoraproject.org
To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org


--
Stephen J Smoogen.