summaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
authorGab <24553253+gabrix73@users.noreply.github.com>2026-08-16 19:24:16 +0200
committerGab <24553253+gabrix73@users.noreply.github.com>2026-08-16 19:24:16 +0200
commit56e296e5875b10ed053cbdedbab08957fce2a461 (patch)
treee1c49b328f1fe5142f7e2b27593b0905c5e3668a /README.md
parent43fbddf016f94f4ba006d82c9a67dca61b5852a1 (diff)
downloadyamnweb-56e296e5875b10ed053cbdedbab08957fce2a461.tar.gz
yamnweb-56e296e5875b10ed053cbdedbab08957fce2a461.tar.xz
yamnweb-56e296e5875b10ed053cbdedbab08957fce2a461.zip
Harden Usenet threading and ingress deliveryHEADmain
Diffstat (limited to 'README.md')
-rw-r--r--README.md5
1 files changed, 5 insertions, 0 deletions
diff --git a/README.md b/README.md
index 745c373..da2acb2 100644
--- a/README.md
+++ b/README.md
@@ -120,6 +120,9 @@ The ingress is installed separately from `deploy/yamn-nym-ingress.service`.
Its environment file must contain the reviewed current YAMN Entry allowlist.
Public YAMN exits deliver to the clearnet Mail-to-News endpoint; they must not
be configured with an Onion-only destination they cannot resolve or reach.
+The ingress retries transient Tor connection failures only before beginning
+the SMTP transaction, avoiding both immediate message loss and unsafe retry
+after an ambiguous SMTP handoff.
## Delivery semantics
@@ -136,6 +139,8 @@ Nym payloads in logs.
## Security notes
- All form input is validated before encoding.
+- Usenet `References` accepts a bounded chain of Message-IDs and generates
+ `In-Reply-To` from the last ID; `Reply-To` is validated as an email address.
- The YAMN encoder reads only the local reviewed public keyring.
- The Nym recipient and Mail-to-News address are deployment configuration,
never browser-controlled destinations.