Re: Is mailback validation still safe?

[SRE]

At 12:22 AM 12/9/00, Chuq Von Rospach wrote:
>But if you think about it, once that 
>validation handshake is complete, there's never ANY further validation

The simple fix is twofold: First, new subscriptions should be moderated
by default until the list owner clears the flag and lets them post freely.

MORE IMPORTANTLY, if you have a continuing problem with people forging
 From addresses to bypass "post by nonsubscriber" traps, you configure
your MLM to require confirmation FROM THE POSTER before the post goes out.
Now the worst that happens is the harvested address gets a few confirmation
requests before the spammer gives up.

I've done both of these things, after being targeted by a single person
with bad intent and persistance, and they work well... if you have the
time to moderate new subscribers and explain to people that they need
to confirm each post. A hassle, but workable.