I might suggest that the correct way to do this would be to have that as an
option for specific cases (like a notification list) but to allow the
password requirement in order to prevent third parties from unsubscribing
users as a DoS attack.... anybody can fake a from address.
_M
| -----Original Message-----
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]]On Behalf Of Andy Schmidt
| Sent: Saturday, April 21, 2001 4:33 PM
| To: [EMAIL PROTECTED]
| Subject: RE: [IMail Forum] List Servers
|
|
| >> From: "Quentin Baker" <[EMAIL PROTECTED]>
| >> Date: Fri, 20 Apr 2001 13:52:15 -0400
|
| >> In other cases, with out passwords and with or without poster.lst users
| should only type: unsubscribe <<
|
| Yes that would be the theory. If you try it, you'll find out that WITH
| poster.lst and password, the ONLY way to unsubscribe is:
|
| a) to specify the password in the unsubscribe subject line, AND
|
| b) to be ON the poster.lst
|
| That is a bug. Imail should:
|
| 1. Check the subject line for "unsubscribe" - if found, it should proceed
| with the unsubscribe (it should treat the unsubscribe from
| subject the SAME
| way as it treats the unsubscribe command sent to the list server!)
|
| 2. ONLY check the password and poster.lst before actually "posting" a
| message.
|
| Currently, the processing order is REVERSED.
|
| It makes absolutely no sense that people have to know/specify the password
| AND even be on the poster.lst to unsubscribe themselves. The don't need
| that information if they send the unsubscribe command to the list server
| itself.
|
| I hope this step-by-step listing makes it easier to understand the actual
| issue at hand.
|
| Best Regards
| Andy Schmidt
|
| Argos Networks
| 600 East Crescent Avenue
| Suite 203
| Upper Saddle River, NJ 07458-1846
|
| Phone: +1 201 934-9411 x20 (Business)
| Fax: +1 201 934-9206
|
| http://www.ArgosWeb.net/
|
|
| Please visit http://www.ipswitch.com/support/mailing-lists.html
| to be removed from this list.
|
| An Archive of this list is available at:
| http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
|
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
