Re: ezmlm and BATV

On Wed, Aug 01, 2007 at 03:15:18PM -0700, John Keith wrote:
> Bruce Guenter <[email protected]> writes:
> 
> > I'm not sure what's being requested with the rest, 
> 
> I believe the BATV part of this discussion pertains to subscriber-only
> (or variants of such) lists.  These lists try to match the envelope
> sender address to a valid list subscriber, but that doesn't work if the
> envelope sender is modified to something such as:
> 
>     [email protected]

Neither ezmlm nor ezmlm-idx will use such an envelope sender, especially
not for standard list messages.  The sender address for list messages
is:

	L-return-N-R@H

where L is the list local name, N is the message number, R is the
recipient email address with @ replaced by =, and H is the list host
name.  For example, from what I can tell this message will be sent to
you with a sender address of

	[email protected]

The list, in this case, is [email protected], and it should be
relatively simple to match the above envelope sender to it.

> I suppose we can put wrapper around ezmlm-gate and ezmlm-issubn that
> knows how to decode the local part of the address to extract the true
> local portion.  Assuming it's cleartext and not encrypted in some way;
> though that could be possible as well.

The only cryptographic technology used in ezmlm-idx is a secure hash,
which is used to verify that a particular (un)subscribe, moderation, or
verification response did in fact originate from the receiving list and
should be acted on.  No addresses are obfuscated in any way except for
replacing @ with = to accomodate mailers that can't handle multiple @
signs in an email address.

> Is there any hope that ezmlm will be BATV aware in the future?  

Which BATV are you referring to?
-- 
Bruce Guenter <[email protected]>                http://untroubled.org/
	I do custom software development.  Email me for details.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGsfvz6W+y3GmZgOgRAtoGAJ9iia0yCYgnqYhBRZEP7h8ZQdfjXACaAgSq
DqWuTQmlZdw2wNHzttmfHZw=
=3+4+
-----END PGP SIGNATURE-----