Skip to content

Update MOU and NCA for enforced TLS - #3261

Merged
SamJamCul merged 1 commit into
mainfrom
require-tls-submission-email-docs
Oct 30, 2026
Merged

SamJamCul merged 1 commit into
mainfrom
require-tls-submission-email-docs

Conversation

@SamJamCul

Copy link
Copy Markdown
Contributor

We're only going to send emails from forms-runner using TLS, so the MOU and NCA have been updated to reflect this.

What problem does this pull request solve?

Trello card: https://trello.com/c/rCFFYttF/3336-require-tls-for-sending-submissions-to-mailboxes

Things to consider when reviewing

  • Ensure that you consider the wider context.
  • Does it work when run on your machine?
  • Is it clear what the code is doing?
  • Do the commit messages explain why the changes were made?
  • Are there all the unit tests needed?
  • Do the end to end tests need updating before these changes will pass?
  • Has all relevant documentation been updated?

Copilot AI balanced review requested due to automatic review settings October 28, 2026 14:32
@SamJamCul
SamJamCul force-pushed the require-tls-submission-email-docs branch from de1f5d0 to e4e35fa Compare October 28, 2026 14:33

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues block the documentation updates clarifying mandatory TLS requirements for submission emails.

No open issues 🎉

What changed in this PR

Updates GOV.UK Forms agreements and mailbox guidance to reflect mandatory TLS for submission emails from forms-runner. This PR documents the delivery requirement; it does not change email-sending behaviour.

Changes:

  • Clarifies that form responses will not be delivered to mail servers without TLS support.
  • Updates agreement dates and advances the non-crown agreement to NCP1.2.
  • Preserves the previous MOU as a version 4 partial.
File Description
config/​locales/​en.yml Adds the TLS requirement to receiving-inbox guidance.
app/​views/​mou_signatures/​_non_crown_agreement_version_current.html.erb Updates the non-crown agreement’s version, date, and TLS terms.
app/​views/​mou_signatures/​_mou_version_current.html.erb Updates the MOU’s date and mandatory TLS wording.
app/​views/​mou_signatures/​_mou_version_4.html.erb Archives the previous MOU wording.

Review effort: Balanced

theseanything
theseanything previously approved these changes Oct 29, 2026
We're only going to send emails from forms-runner using TLS, so the MOU
and NCA have been updated to reflect this.
@SamJamCul
SamJamCul force-pushed the require-tls-submission-email-docs branch from efbdccc to a71f7c7 Compare October 30, 2026 10:12
@github-actions

Copy link
Copy Markdown

🎉 A review copy of this PR has been deployed! You can reach it at: https://pr-3261.admin.review.forms.service.gov.uk/

It may take 5 minutes or so for the application to be fully deployed and working. If it still isn't ready
after 5 minutes, there may be something wrong with the ECS task. You will need to go to the integration AWS account
to debug, or otherwise ask an infrastructure person.

For the sign in details and more information, see the review apps wiki page.

@SamJamCul
SamJamCul added this pull request to the merge queue Oct 30, 2026
@github-merge-queue github-merge-queue Bot closed this pull request by merging all changes into main in 0ecf006 Oct 30, 2026
Merged via the queue into main with commit 44ed700 Oct 30, 2026
8 checks passed
@SamJamCul
SamJamCul deleted the require-tls-submission-email-docs branch October 30, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants