Re: Mailing lists - assumptions

"John Levine" <[email protected]> 19 Apr 2014 16:26:08 -0000
Newsgroups gmane.ietf.rfc822
Message-ID <[email protected]>
>> Anything I screwed up there? Any assumption I'm missing?
>
>I'm not seeing where it addresses bad actors posing as mailing lists.
>Dealing with that problem probably involves signatures and reputation
>systems tied to the signers (probably at the domain level). I can't
>think of a way around that.

Agreed.  In my strawman proposal, if the M-R header/token isn't
signed, bad guys could trivially circumvent it by adding a fake token.

R's,
John

_______________________________________________
ietf-822 mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-822