https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5185

RW <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #20 from RW <[email protected]> 2012-02-13 15:24:54 UTC ---
I'm sorry to come to this after it's committed, but removing the received
header from msgid is a very bad idea. 

There needs to be some part of msgid that isn't under the control of spammers,
otherwise it's trivial for them to prevent their spam ever being learned. They
can generate as many spams with the same msgid as they like, and they can prime
the database with an initial dummy high-scoring spam that has no usable tokens
in common with the rest.

IMO the best way to handle this is to add some kind of UID to one of the
headers (preferably with some control over where it goes). Other than that IMO
it's better to put it back as it was.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to