From owner-freebsd-security@FreeBSD.ORG Fri May 14 05:49:47 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 88FE516A4CE for ; Fri, 14 May 2004 05:49:47 -0700 (PDT) Received: from dire.bris.ac.uk (dire.bris.ac.uk [137.222.10.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 05D1C43D2D for ; Fri, 14 May 2004 05:49:47 -0700 (PDT) (envelope-from Jan.Grant@bristol.ac.uk) Received: from mail.ilrt.bris.ac.uk ([137.222.16.62]) by dire.bris.ac.uk with esmtp (Exim 4.34) id 1BOc8D-0004Jv-OU; Fri, 14 May 2004 13:49:44 +0100 Received: from cmjg (helo=localhost) by mail.ilrt.bris.ac.uk with local-esmtp (Exim 3.16 #1) id 1BOc7i-0006H0-00; Fri, 14 May 2004 13:49:10 +0100 Date: Fri, 14 May 2004 13:49:10 +0100 (BST) From: Jan Grant X-X-Sender: cmjg@mail.ilrt.bris.ac.uk To: Fernando Schapachnik In-Reply-To: <20040514120531.GE306@bal740r0.mecon.gov.ar> Message-ID: References: <777BCABEE522D5119E3E00508B6CA0B802E9AA95@CYBHQMSX05> <20040514095116.GA977@straylight.m.ringlet.net> <20040514120531.GE306@bal740r0.mecon.gov.ar> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: Jan Grant X-Spam-Score: 0.0 X-Spam-Level: / cc: "'freebsd-security@freebsd.org'" cc: Patrick Baker Subject: Re: How do fix a good solution against spam.. X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 May 2004 12:49:47 -0000 On Fri, 14 May 2004, Fernando Schapachnik wrote: > I don't know TMDA in depth, but with ASK, that most probably wouldn't happen. > Here's why: every user has to define a "mailkey", which is some phrase that is > present in his .sig. Nowadays is pretty common to get replies quoting the > full message. ASK delivers (and also whitelists, if so configured) mail > containing your mailkey. So, it's a hack that is defeated by decent sig-stripping mail clients, and adds (dubious) value to the practice of including the entirety of a message. > Also, I don't know why this guy is so upset. Only thing he has to do is reply. > Not really that hard. Is like complaining about security checks in a building, > even though you were invited. These systems are rude. They're also broken. They offload personal effort from the user onto other members of the internet community. That makes them antisocial too. And come to mention it, if someone invites me to their building then I'd consider it a common courtesy for _them_ to make arrangements to minimise any security hassle I'd receive. -- jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/ Tel +44(0)117 9287088 Fax +44 (0)117 9287112 http://ioctl.org/jan/ I'm the dandy information superhighwayman.