Internetworkers: http://www.ibiblio.org/internetworkers/

[Steven Champeon <schampeo AT hesketh.com>]

on Tue, Oct 14, 2003 at 01:25:01PM -0400, Ilan Volow wrote:
> 
> On Tuesday, October 14, 2003, at 11:25  AM, Steven Champeon wrote:
> 
> >on Tue, Oct 14, 2003 at 11:24:02AM -0400, zman wrote:
> >>On Tue, 14 Oct 2003, Steven Champeon wrote:
> >>>Wouldn't be hard at all, actually. Completely, insanely, 
> >>>ridiculously,
> >>>insecure, sure. But not hard to do. Via sendmail's aliases file:
> >>
> >>and then the SPAM starts going to that address...
> >
> >Exactly the problem Greg had with metababy.
> >
> >
> 
> Couldn't you include some sort of public key thingy that verifies your 
> identity as an attachment to the e-mail, and make sure on the server 
> that info from e-mails is posted only if the e-mail has an attachment 
> that checks out?

Sure, but then you've opened yourself up to DoS attack, as pgp/gpg
churns through signed messages. 

-- 
hesketh.com/inc. v: (919) 834-2552 f: (919) 834-2554 w: http://hesketh.com
Book publishing is second only to furniture delivery in slowness. -b. schneier