Re: Thinking outside the box

On 13-03-18 08:34 PM, Barry Shein wrote:

> Any one list is small, but if it were a widely adopted convention (and
> I believe among mailing lists it is) and could be reaped they might
> get millions of (recipient,[PHRASE]) pairs. Maybe that's still not
> enough, but the point is it's easy to fake yet I've never heard of
> anyone faking it.

Why bother?  Spam the mailing list with the From: forged to be the owner
of the addressbook you got the list from, and the list MTA dutifully
adds the [PHRASE].

Seen that.

>  > But - and I apologise for repeating myself - why not use the sender's email address as a unique password-like identifier? And put that in a header. Call it 'From'. Works rather well.
> 
> You haven't seen From fraud?
> 
> I get spam "from" myself all the time.
> 
> That's trivial to script.

I think Martijn was being ironic ;-)