Re: Email::MIME

2010-01-06 Thread Casey West
On Tue, Jan 5, 2010 at 1:10 PM, Wedge Martin wrote: > I hate to bug you with this... I've got this problem that cropped > up when sending email through Email::MIME where french and portuguese > accents show up as '=7E' type representations in the body_raw() and > in the body() they get incorrec

Re: Email::MIME

2010-01-06 Thread Wedge Martin
Hey Casey, Thank you very much for your response. As it turns out, I was treating the body() like a string, but it's really a data stream, so I needed to utf8 encode it before inserting it. I also ran into another weird issue, which turned out to be the MIME::Base64 encoding data into base64 wi

Re: Email::Address easily spoofed

2010-01-06 Thread Hans Dieter Pearcey
Excerpts from Justin Skazat's message of Tue Jan 05 17:32:25 -0500 2010: > > But that can already easily be done, I can just put > > > > From: You > > > > in my email headers. > > OK - what should I do about that? What's the general wisdom to help thwart > that? Use the Sender: header? Both? S

Re: Email::Address easily spoofed

2010-01-06 Thread Karen Cravens
Hans Dieter Pearcey wrote: If you are relying on From (or Sender) headers for access control, you have already lost. Almost every part of the email header and SMTP transaction can be faked by a malicious user. Depends on what you mean by access control. I can easily see where you'd want to u

Re: Email::Address easily spoofed

2010-01-06 Thread Justin Skazat
On Jan 6, 2010, at 6:14 AM, Hans Dieter Pearcey wrote: > If you are relying on From (or Sender) headers for access control, you have > already lost. Almost every part of the email header and SMTP transaction can > be faked by a malicious user. OK - my apologies for such foolish questions, but w

Re: Email::Address easily spoofed

2010-01-06 Thread Hans Dieter Pearcey
Excerpts from Karen Cravens's message of Wed Jan 06 11:29:15 -0500 2010: > Depends on what you mean by access control. I mean what the OP said he was using it for: running various commands when messages are received. > You'd still want E::A to parse it properly, if only so you can test for > "If