Re: Summary of Issues Raised to date

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


David Nicol writes:
> Laird Breyer wrote:
> 
> >- Spoofed [category] tags. How does a filter deal with them?
> >
> 
> this sounds like a job for capability keys.
> 
> What I mean by that is, instead of the delivered message containing
> ("bearing") a token that indicates the grade of it and so on, the
> delivered message would contain a key with which the MUA could look up a
> grade in the MTA's database of filter results, in effect a "book" system
> for communicating filter results.
> 
> A standard would be required for interoperability.  There has not been a
> lot of tag forging because the various tagging filters all use their own
> tags.  (I don't use a tagging filter at this time except for my cpan.org
> address which runs through spamassassin.  Is there spam being sent now
> with forged SA headers?)

FWIW, I don't think so -- because we ignore any pre-existing markup
headers.   I did see spam recently designed to get past "exiscan",
because it *did* accept those.

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFAV1P9QTcbUG5Y7woRApigAJ9zQAurqACm28RndCl6jRhqwhyHUwCeKoaD
zIlV05JExjiI966rvpiV3MM=
=Y93K
-----END PGP SIGNATURE-----