Daniel Pocock <dan...@pocock.pro> writes: > I was only talking about control emails (e.g. the -done address and > control@). The requirements for opening bugs or submitting comments > (without pseudo-headers) could remain as they are.
I don't believe the spammer intended to close the bug. The bug had already been closed by mailing the -done address in January 2015 and the spammer could easily scrape that address from the bug web page. That kind of thing seems less likely to happen with control@ or pseudo-headers.