Ian> Quite right. Rich's argument is, essentially, that obfuscation Ian> isn't 100% effective so it shouldn't be used. Frankly, if it's 10% Ian> effective, then it's worth doing in my view.
I would be quite surprised if address obfuscation is anywhere close to 10% effective. Maybe 0.01%. The problem I see with Barry's argument that users demand it so Mailman must provide it is that position just propagates misinformation about the ineffectiveness of the "feature". I would vote for tossing it out, or at the very least making it a per-list flag which admins could disable if they wanted. The other thing about Mailman's obfuscation is that I sorta think that by now the spammers have figured it out. I mean, "skip at pobox.com"? Come on. Even Barry stands a good chance of writing a regular expression that can locate something like that, his self-deprecation about his r.e. prowess notwithstanding. :-) If nothing else, all an enterprising spammer would have to do is steal Mailman's email address matcher and replace "@" with " at ". Oh, wait, it's open source. They wouldn't even have to steal the code. -- Skip Montanaro - s...@pobox.com - http://www.smontanaro.net/ Getting old sucks, but it beats dying young _______________________________________________ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://wiki.list.org/x/AgA3 Searchable Archives: http://www.mail-archive.com/mailman-developers%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://wiki.list.org/x/QIA9