Fwd: Package maintainers: verify your PyPI account email address

[Sumana Harihareswara]

If you maintain any PyPI packages, please verify your address on PyPI. Details below.


-------- Forwarded Message --------
Subject: Package maintainers: verify your PyPI account email address
Date: Mon, 16 Jul 2018 21:57:38 -0400
From: Sumana Harihareswara <sh at changeset.nyc>
To: DistUtils mailing list <distutils-sig at python.org>

Heads-up: if you have a pypi.org or test.pypi.org account, please verify your email address:

  https://pypi.org/manage/account/

  https://test.pypi.org/manage/account/

Reason:

> We have a problem with a bit of our data, namely that due to historical reasons we have a fair amount of users in the database that do not have a verified primary email address. The side effect of this is that we're currently sending emails to email addresses that we have not had verified. This is a bad situation to be in, because in order to keep our bounce/spam rate low, we should be confirming all email addresses before sending email to them. In addition the way our bounce handling code works is it un-verifies the email address, which the intent was to stop sending email to it until the user has reverified their email address.
> 
> In total there are about 193k user accounts with a unverified email address for their primary address, and 44k that do have a verified email address for their primary account.
> 
> So we need to come up with a strategy to resolve this, because it's pretty important that we don't send email to unverified addresses.

(quoting from Donald Stufft's explanation https://github.com/pypa/warehouse/issues/3632 which goes on to detail the step-by-step plan)

Package maintainers should especially do this soon. As of a few days ago, any user whose primary email address is unverified can't upload a file: https://github.com/pypa/warehouse/pull/4292 

Please forward to other package maintainers.

After we iron out any issues I figure we'll email the announce list https://mail.python.org/mm3/mailman3/lists/pypi-announce.python.org/ .

-- 
Sumana Harihareswara
Changeset Consulting
https://changeset.nyc