-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matthew Toseland wrote:
> The node which created the invite already
> knows the IP address of the computer the invite is being sent to

Does it? How?

> We may require some sort of out-of-band verification.

Unfortunately people will probably just include the password or key
fingerprint in the same email as the reference, or send it over the same
logged IRC channel. But there's not much we can do about that.

Maybe it should be possible to put refs and invitations inside
password-protected zip files for people who need to email them through
restrictive filters? Filtering an extra MIME type will be a 5-minute job
for China.

Cheers,
Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEpjFcyua14OQlJ3sRAk3AAJsFahUM4Z8XzW5NvoCdH2l8UPkSLgCfbcPF
OUq1aMgDeYArEAoGXWq4uyA=
=9nNW
-----END PGP SIGNATURE-----

Reply via email to