# Mailing List Replacement : Email Attachments

**URL:** https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710
**Category:** Feature
**Tags:** email
**Created:** [July 18, 2014, 12:58pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710 "2014-07-18T12:58:36Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![paully21](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/paully21/32/72673_2.png) [@paully21](https://meta.discourse.org/u/paully21)
#### Post date: [July 18, 2014, 12:58pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/1 "2014-07-18T12:58:36Z")

</div>

We implemented Discourse for a client to replace their MailMan mailing list. For the most part, the new Discourse forum is functioning awesomely in its role as a replacement, but there seems to be one area that is problematic.

The forum’s members are all in mailing-list mode (they get notified of all posts). The whole forum is private. Authentication is handled using SSO to an MVC site.

In the last few days, members have been trying to couple of attachments to the group. The discussion is quickly approaching [Godwin’s Law](http://goo.gl/ody6Bd) territory because the attachments are not actually included in the notification emails to the group.

The issue is many of the mailing list participants do not actually visit the forum to log in…Therefore the links in the notification email to the attachment block them with a login page. From there they would need to do the SSO sign in on the main site and know enough to click the original link in the email to get to the attachment again.

They are used to having the attachment included in the notification email. I understand all the reasons why including attachments in emails is a bad idea…I get it. But, maybe there is something that can be done so we could tokenize the links so they wouldn’t have to be protected or turn off authorization requirements for uploaded files.

If one of the goals is to replace mailing lists, I do believe this is an issue that will need to be addressed.

As always, I am willing to do whatever I can to help.

---

<div class="post-metadata">

### Author: ![adopilot](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/adopilot/32/105040_2.png) [@adopilot](https://meta.discourse.org/u/adopilot)
#### Post date: [July 18, 2014, 10:52pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/2 "2014-07-18T22:52:01Z")

</div>

> [@paully21](#):
>
> The issue is many of the mailing list participants do not actually visit the forum to log in

I have same problem .  
And my idea is to make boot which is going to fetch through SSO site and do boot logins to make discource accounts.  
Since we hold cardinals at “our” site we can read cardinals and make calls to discource SSO endpoint.

I am willing to help making [MVC.net](http://MVC.net) or WebForms control whic will do boot login to discource

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [July 19, 2014, 12:19am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/3 "2014-07-19T00:19:09Z")

</div>

Can we think about a possible solution here @riking?

---

<div class="post-metadata">

### Author: ![lake54](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lake54/32/121955_2.png) [@lake54](https://meta.discourse.org/u/lake54)
#### Post date: [August 14, 2014, 9:11pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/4 "2014-08-14T21:11:25Z")

</div>

Can I add my own “+1” here as well? Most of the attachments our members will be sending if/when we switch to Discourse will be images, which are displayed inline in notifications, but occasionally they’ll be sending PDFs and other miscellaneous files that really do need to be attached. An option to include non-image attachments would go a long way to helping us in this area.

This may be relevant too: [http://help.mandrill.com/entries/21763806-Does-Mandrill-support-attachments-](http://help.mandrill.com/entries/21763806-Does-Mandrill-support-attachments-)

---

<div class="post-metadata">

### Author: ![jbcpollak](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jbcpollak/32/115863_2.png) [@jbcpollak](https://meta.discourse.org/u/jbcpollak)
#### Post date: [March 26, 2015, 3:02am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/5 "2015-03-26T03:02:59Z")

</div>

Has there been any movement on this issue? It would be a nice feature to have to complete mailing-list parity.

---

<div class="post-metadata">

### Author: ![James\_Hale](https://avatars.discourse-cdn.com/v4/letter/j/ebca7d/32.png) [@James\_Hale](https://meta.discourse.org/u/James_Hale)
#### Post date: [October 19, 2016, 8:04pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/6 "2016-10-19T20:04:03Z")

</div>

Same boat! Please :). Just moved our nonprofit association to discourse hosted product.

Thanks

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [October 20, 2016, 5:27am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/7 "2016-10-20T05:27:26Z")

</div>

I thought we fully support attachments, right @zogstrip ?

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [May 22, 2017, 12:52pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/8 "2017-05-22T12:52:02Z")

</div>

We support attachments in **incoming** emails. Not **outgoing** emails (ie. notifications).

---

<div class="post-metadata">

### Author: ![James\_Hale](https://avatars.discourse-cdn.com/v4/letter/j/ebca7d/32.png) [@James\_Hale](https://meta.discourse.org/u/James_Hale)
#### Post date: [May 23, 2017, 1:45am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/13 "2017-05-23T01:45:39Z")

</div>

Can this please be changed? What’s the point putting a picture in to a message if it’s not going to be received? The sender has no idea who (if any) of their recipients will be viewing it in the web browser. And worse still, the average user has no idea about this limitation.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [May 23, 2017, 1:48am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/14 "2017-05-23T01:48:40Z")

</div>

It appears there is a misunderstanding; this only applies to _attachments_ like a word document, **not a jpg or png or gif image.**

So unless you are sending out Microsoft Word documents or other unusual attachments, I would not be concerned.

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [May 23, 2017, 5:58am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/15 "2017-05-23T05:58:29Z")

</div>

Also note that these attachment will appear as links, just as in the web app. The only restriction is that they won’t additionally be included in the mail as an actual attached file 🙂

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [May 23, 2017, 2:28pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/16 "2017-05-23T14:28:59Z")

</div>

Sorry about that.

When I say Discourse doesn’t support attachments in **outgoing** emails, I actually mean that files other than images, will not be **attached** to emails sent by Discourse.

Images will be inlined and other kind of files will be linked like @fefrei noted.

---

<div class="post-metadata">

### Author: ![James\_Hale](https://avatars.discourse-cdn.com/v4/letter/j/ebca7d/32.png) [@James\_Hale](https://meta.discourse.org/u/James_Hale)
#### Post date: [May 23, 2017, 11:07pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/17 "2017-05-23T23:07:42Z")

</div>

Perfect! Thanks for clearing that up, guys. Nice, fast, personal help as always

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [May 15, 2019, 9:01pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/18 "2019-05-15T21:01:25Z")

</div>

@maja can you have a look at “converting” attachments (ie. uploads that aren’t images) in **outgoing** emails to proper attachments?

---

<div class="post-metadata">

### Author: ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)
#### Post date: [May 20, 2019, 12:52pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/20 "2019-05-20T12:52:38Z")

</div>

> [@zogstrip](#):
>
> look at “converting” attachments (ie. uploads that aren’t images) in **outgoing** emails to proper attachments

That would be amazing if possible. ❤

---

<div class="post-metadata">

### Author: ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)
#### Post date: [May 20, 2019, 5:49pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/21 "2019-05-20T17:49:07Z")

</div>

So someone reminded me of reasons why I should retract, or at least be cautious, about my above statements:

1. Could create a ton of data sent over email providers, possibly increasing costs.
2. Attaching files to email promotes behavior that has increased security risks (email attachments are still a huge attack vector).
3. Creates a lot of copies of the same file vs. one copy living on the Discourse server.
4. No way to “take back” the attachment (via post editing) if the wrong file is uploaded and emailed out automatically to _N_ people by accident.
5. Probably some others we didn’t think of.

So … YMMV. I at least hope this option is a switch with default off. 🙂

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [May 21, 2019, 8:32am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/22 "2019-05-21T08:32:57Z")

</div>

> [@downey](#):
>
> That would be amazing if possible. ❤

It sure is 😉 @maja is working on it

[https://github.com/discourse/discourse/pull/7571](https://github.com/discourse/discourse/pull/7571)

---

<div class="post-metadata">

### Author: ![danekhollas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/danekhollas/32/79637_2.png) [@danekhollas](https://meta.discourse.org/u/danekhollas)
#### Post date: [May 22, 2019, 12:32am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/23 "2019-05-22T00:32:48Z")

</div>

> [@downey](#):
>
> - No way to “take back” the attachment (via post editing) if the wrong file is uploaded and emailed out automatically to _N_ people by accident.

Not sure you can take it back in even in the current state. If I edit a post and change/delete the attachment, is the original file deleted immediately from the Discourse instance or would the link originally sent over the email still work?

---

<div class="post-metadata">

### Author: ![tgxworld](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tgxworld/32/106117_2.png) [@tgxworld](https://meta.discourse.org/u/tgxworld)
#### Post date: [May 24, 2019, 12:54am UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/24 "2019-05-24T00:54:36Z")

</div>

> [@downey](#):
>
> Could create a ton of data sent over email providers, possibly increasing costs.

In order to add the attachments on to the mail, we have to hold the contents of the file in memory as well.

@maja I think we need to look at some safe guards around here for the maximum number of attachments.

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [July 1, 2019, 3:47pm UTC](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710/25 "2019-07-01T15:47:31Z")

</div>

@gerhard can you take over @maja’s PR?

[https://github.com/discourse/discourse/pull/7571](https://github.com/discourse/discourse/pull/7571)

[Next page](https://meta.discourse.org/t/mailing-list-replacement-email-attachments/17710.md?page=2)
