Re: New feature request: "faked" identity, and supercede

[David Moore <dmoore@UCSD.EDU>]

Steinar Bang <sb@metis.no> writes:
> You can add another thing to this list:
>  it might be a good idea to quietly override a custom email address
>  for a domain that doesn't have an MX record, or an A record, in DNS
> 
> Leave this fact out of the documentation, and out of the elisp
> comments (maybe...).  If someone wants to override this they'll have
> to work at it, which would redirect email forger wannabess to Netscape
> or something.

	This is a good plan, we can also suggest that all email forgers
use 'metis.no' as a hostname when forging. :)  The current trend of
spammers is to use valid hostnames, except ones they don't have accounts
on.  So it wouldn't help much there.  Now it might be useful to check
something like this just so it can _tell_ the user that they have their
return address configured incorrectly.

	I guess I could see someone wanting their mail reader to check
the addresses of incoming messages for host validity, something called
similar to mc-verify.  You might want to go further and have your
'forgery-verify' routine look at the insertion points (received from, or
path headers) compared with the addresses.  But this seems like a lot of
work, and the heuristics might be wrong often?

-- 
David Moore <dmoore@ucsd.edu>       | Computer Systems Lab      __o
UCSD Dept. Computer Science - 0114  | Work: (619) 534-8604    _ \<,_
La Jolla, CA 92093-0114             | Fax:  (619) 534-1445   (_)/ (_)
<URL:http://oj.egbt.org/dmoore/>    | Solo Furnace Creek 508 -- 1996!