On Tue, 17 Feb 2004, Ken Murchison wrote:
I've actually been looking for more info on this type of thing, and here is what I found:
http://www.unicom.com/pw/reply-to-harmful.html http://cr.yp.to/proto/replyto.html
I can strip the address before transferring the article via NNTP, but this doesn't help if the article is posted/replied via SMTP.
Ultimately, isn't that also just an NNTP post, via lmtp2nntp?
If the message is inserted directly into this folder via just lmtp, then the Reply-To (Newsgroups, etc.) header won't be added anyway....
True, but if the client replies to more than just the Reply-To, then the post address will get exposed.
I know about the Reply-To evil stuff, but isn't this a bit different? I mean, we're talking about a newsgroup, not a mailing list. With a mailing list, the Reply-To munging would impact all those on that list. However, with a newsgroup, it's only impacting that newsgroup, right?
I believe so. I have to do some more thinking and testing with clients.
Of course I guess this all gets *really* muddy if you're doing any sort of mirroring between a list and a newsgroup (anybody try that yet?), but that's something for the implementor of such a gateway to worry about, right?
I suppose.
-- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key-- http://www.oceana.com/~ken/ksm.pgp --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
