Someone tell this dude...

[David Hoffman]

On Apr 10, 2005 5:11 PM, Scot L. Harris <webid at cfl.rr.com> wrote:
> No no no!  I meant nothing personal.  Just asking a question about how
> it works.  Based on the description given it just seemed that there was
> a potential race condition as I understood the rules as they were
> described here on the list.
> 
> I am just curious how a challenge message gets through to a TMDA user if
> that user has not whitelisted the sender yet.  Seems like a difficult
> things to resolve without letting someone easily spoof such a message.
> That is all I am saying.

Scot, 
Sorry, for any misunderstanding. I think the key here is that the
system is only as good as the users who use it, and their
understanding of the system. For example, my TMDA account is set up so
that if I e-mail someone, the address I wrote to is automatically
added to my whitelist. And my reply-to address is encrypted by TMDA so
that even if someone replies to my message, the encrypted reply-to
will be deciphered as a valid address (using TMDA's dated address
function -- the address is valid for a predetermined period of time).

So what it comes down to is that if Peter Whalley had knowledge of how
to PROPERLY use his system, then he probably would not be generating
flame threads about C/R in the first place. What he SHOULD have done
was to incorporate some type of whitelisting function so that messages
that were sent from users of the list would automatically be accepted.


-- 

David
Registered Linux User 383030 (since everyone else was doing it 8-)
-----------------------------------------------------------------------
There are only 10 kinds of people in this world,
those who understand binary, and those who don't.