Matt Kettler wrote:
mouss wrote:
if you can't validate the header, you can't trust it.
And the whole point of the Michael's original message was to find out
if you can validate it, therefore trust it.
A simple "I don't think you can validate that" would have been
appropriate, but suggesting he use it as a block criteria is
completely contrary to his intentions.
well, I forgot the smileys and I'm sorry for that. but even assuming
that my post was completely wrong, dumb, stupid, inappropriate, it
doesn't justify a personnal attack.
Note that in the case of outbound mail, I am concerned about the privacy
issue, and the block is not completely silly. Removing the headers may
be a better solution if that breaks nothing, but I am generally
reluctant to altering mail. I agree that blocking inbound mail because
of the x-cr- headers is not appropriate _if_ this becomes widely used.