On Feb 11, 2008 11:10 AM, Ryan Simpkins <[EMAIL PROTECTED]> wrote:
>
>  2) A VIP sends an e-mail. Your system sends an automated reply with a
> simple
> step a VIP has to follow to ensure they get past the filter.


Once upon a time, automated challenge/response systems were considered
counter-productive if not downright harmful.  Google "challenge response
harmful" (unquoted) to get an eyeful.  Having been repeatedly victimized by
C/R systems, my main objection to them is that they enable and encourage
joe-job (spoofed sender) attacks in which innocent victims are attacked by
bogus challenges from C/R systems.

Is the "harmful" characterization no longer applicable to C/R systems? If
so, why?

Chris

/*
PLUG: http://plug.org, #utah on irc.freenode.net
Unsubscribe: http://plug.org/mailman/options/plug
Don't fear the penguin.
*/

Reply via email to