From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/8693
Path: main.gmane.org!not-for-mail
From: David Moore <dmoore@UCSD.EDU>
Newsgroups: gmane.emacs.gnus.general
Subject: Re: New feature request: "faked" identity, and supercede
Date: 09 Nov 1996 09:33:01 -0800
Sender: dmoore@sdnp5.ucsd.edu
Message-ID: <rvram3b2cy.fsf@sdnp5.ucsd.edu>
References: <whvibt3brz.fsf@norne.metis.no> <m2locgckdx.fsf@proletcult.ifi.uio.no> <whk9rzel3j.fsf@norne.metis.no> <m2zq0veh17.fsf@proletcult.ifi.uio.no> <whbudbe9og.fsf@norne.metis.no> <m27mnyc29o.fsf@proletcult.ifi.uio.no> <whlocecp00.fsf@norne.metis.no> <m24tizhnwr.fsf@proletcult.ifi.uio.no> <whbud7b8tw.fsf@norne.metis.no>
NNTP-Posting-Host: coloc-standby.netfonds.no
X-Trace: main.gmane.org 1035148824 13786 80.91.224.250 (20 Oct 2002 21:20:24 GMT)
X-Complaints-To: usenet@main.gmane.org
NNTP-Posting-Date: Sun, 20 Oct 2002 21:20:24 +0000 (UTC)
Return-Path: <ding-request@ifi.uio.no>
Original-Received: (qmail 9711 invoked from smtpd); 9 Nov 1996 17:49:03 -0000
Original-Received: from ifi.uio.no (0@129.240.64.2)
  by deanna.miranova.com with SMTP; 9 Nov 1996 17:49:02 -0000
Original-Received: from UCSD.EDU (mailbox1.ucsd.edu [132.239.1.53]) by ifi.uio.no with ESMTP (8.6.11/ifi2.4) 
	id <SAA08830@ifi.uio.no> for <ding@ifi.uio.no> ; Sat, 9 Nov 1996 18:34:04 +0100
Original-Received: from sdnp5.ucsd.edu (sdnp5.ucsd.edu [132.239.79.10]) by UCSD.EDU (8.8.2/8.6.9) with SMTP id JAA17335 for <ding@ifi.uio.no>; Sat, 9 Nov 1996 09:34:02 -0800 (PST)
Original-Received: by sdnp5.ucsd.edu (SMI-8.6/SMI-SVR4)
	id JAA17521; Sat, 9 Nov 1996 09:33:02 -0800
Original-To: "(ding) Gnus Mailing List" <ding@ifi.uio.no>
In-Reply-To: Steinar Bang's message of 09 Nov 1996 16:13:15 +0100
Original-Lines: 29
X-Mailer: Red Gnus v0.57/XEmacs 19.14
Xref: main.gmane.org gmane.emacs.gnus.general:8693
X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:8693

Steinar Bang <sb@metis.no> writes:
> You can add another thing to this list:
>  it might be a good idea to quietly override a custom email address
>  for a domain that doesn't have an MX record, or an A record, in DNS
> 
> Leave this fact out of the documentation, and out of the elisp
> comments (maybe...).  If someone wants to override this they'll have
> to work at it, which would redirect email forger wannabess to Netscape
> or something.

	This is a good plan, we can also suggest that all email forgers
use 'metis.no' as a hostname when forging. :)  The current trend of
spammers is to use valid hostnames, except ones they don't have accounts
on.  So it wouldn't help much there.  Now it might be useful to check
something like this just so it can _tell_ the user that they have their
return address configured incorrectly.

	I guess I could see someone wanting their mail reader to check
the addresses of incoming messages for host validity, something called
similar to mc-verify.  You might want to go further and have your
'forgery-verify' routine look at the insertion points (received from, or
path headers) compared with the addresses.  But this seems like a lot of
work, and the heuristics might be wrong often?

-- 
David Moore <dmoore@ucsd.edu>       | Computer Systems Lab      __o
UCSD Dept. Computer Science - 0114  | Work: (619) 534-8604    _ \<,_
La Jolla, CA 92093-0114             | Fax:  (619) 534-1445   (_)/ (_)
<URL:http://oj.egbt.org/dmoore/>    | Solo Furnace Creek 508 -- 1996!