h icon indicating copy to clipboard operation
h copied to clipboard

Move h's reply and mention notification emails to a sub-account

Open seanh opened this issue 8 months ago • 0 comments

Reply notification and mention notification emails are sent in response to user actions (creating replies or annotations with @mentions in them) and could be abused, for example to send spam.

It would be bad if a burst in these types of email filled up our Mandrill quota and prevented more important emails from being sent (for example account activations, password resets, ...).

To address this create a new "sub-account" in Mandrill, change h to use this sub-account for reply and mention notifications, and add an hourly quota to the sub-account.

See also:

  • https://github.com/orgs/hypothesis/projects/153/views/1?pane=issue&itemId=102470083 (the same issue, but for mention notification emails sent by LMS)
  • https://github.com/orgs/hypothesis/projects/153/views/1?pane=issue&itemId=102896489&issue=hypothesis%7Ch%7C9411 (implement per-sender email limits in application logic, which is a separate issue)

seanh avatar Mar 21 '25 17:03 seanh