At 6:52 PM +0100 2004-11-04, Kim Nevelsteen wrote:
Hello Mainman developers,
Actually, this is the mailman-users mailing list. There is a separate mailman-developers mailing list.
How does Mailman confirm that a message sent out under a particular address is *actually* the real address.
It checks the headers in a specific order to see what is claimed.
I can configure any outgoing address I like in my email client, so who says I can't send a mail to the list under the list owners address and get a post of spam?
That's true. There is no cryptographic validation performed on the sender address as claimed in the message.
See <http://mail.python.org/pipermail/mailman-users/2004-October/040464.html> for more on this subject.
-- Brad Knowles, <[EMAIL PROTECTED]>
"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety."
-- Benjamin Franklin (1706-1790), reply of the Pennsylvania
Assembly to the Governor, November 11, 1755SAGE member since 1995. See <http://www.sage.org/> for more info. ------------------------------------------------------ Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
