leastauthority.com icon indicating copy to clipboard operation
leastauthority.com copied to clipboard

Rotate `info@` password.

Open nathan-at-least opened this issue 10 years ago • 4 comments

Warning: Doing this will break some production services. Plan/execute carefully. See comments below.

@daira and I are working on monitoring deployment, and we realized we want separate google/email accounts for the monitoring processes on analytics versus rho so that each instance can have separate email/google credentials for better privilege separation.

However, the info@ password has already been exposed to analytics@, so after we've set up a new analytics@ account, we need to rotate the info@ password.

This is a (semi-) prerequisite for #270.

nathan-at-least avatar Aug 28 '14 16:08 nathan-at-least

Warning: Rotating these credentials will break various things including new user signups. Therefore we need to be careful and coordinated on this step.

nathan-at-least avatar Aug 28 '14 16:08 nathan-at-least

We decided not to separate the accounts yet because we ran into an authentication error trying to send mail from [email protected]. The info@ password should not be rotated (because there would be no point) until we've fixed that.

daira avatar Sep 02 '14 15:09 daira

Not sure we'll keep using this address in the long run. Not even sure we're still using it now. I'll check into that and motivate the rotation if necessary.

Also, long run, maybe will move away from info@ for this because we're not monitoring mail to that address on a regular basis (don't want to lose customer correspondence).

exarkun avatar Jan 19 '17 15:01 exarkun

Other options: there is a monitoring@ set up to go to a group of us.

I'd prefer we free up info@ for general use since people might use this to contact us. Let me know if you want me to set up something else set up.

Liz315 avatar Feb 09 '17 15:02 Liz315