Sidney Markowitz <[EMAIL PROTECTED]> writes:

> Spammers can control the size of the tokens they send, so we have to 
> protect against unlimited sizes.

Maybe 128 is too large in a theoretical worst-case attack (of someone
turning on storage of original tokens).  32 or 64 might be better.

Daniel

-- 
Daniel Quinlan                     anti-spam (SpamAssassin), Linux,
http://www.pathname.com/~quinlan/    and open source consulting

Reply via email to