Re: CBV

David Woodhouse <[email protected]> Fri, 30 Apr 2004 09:16:58 +0100

Newsgroups	gmane.mail.spam.srs.general
Message-ID	<[email protected]>

On Thu, 2004-04-29 at 18:22 -0400, Meng Weng Wong wrote:
> But SES makes the sender vulnerable to spoofing --- a spammer could send
> mail *as* that SES address to a bazillion recipients.  You'd have to
> dynamically invalidate the SES address and hope enough people do CBV.

You do that anyway; they're timestamped. And web archivers tend not to
include the Return-Path in my experience. Hell, most don't even bother
to include the Message-Id (let alone include '&references=' in the
mailto: link if they have a reply link).

Yes, there's a replay window. It's short.

-- 
dwmw2