Re: Challenge-response mail filters considered harmful
On Fri, Aug 08, 2003 at 12:34:36AM -0700, Steve Lamb wrote:
> On Fri, 8 Aug 2003 09:09:31 +0200
> David Fokkema <firstname.lastname@example.org> wrote:
> > Let me get this straight: NO user intervention after the first
> > harrassing mail? Isn't this a bit risky (just trying to help you out)?
> > For example, A sends B the following e-mail:
> > B!!! You are a empty-minded son of a, never mind. Please rid the
> > universe of your existence.
> > That might be worth calling up the main menu and hitting 'g', right?
> > Now, I really don't know what your warning message is like, but suppose
> > A would reply to B with the following mail:
> Or even better. "Whoops, sorry, had a fight with my GF last night and
> while I was sleeping she fired off random crap emails to everyone in my
> address book."
LOL. Which is not really a problem with CR, since you get the challenges
and know that she did this and set things right. No, this is not right.
I forgot how it worked, but CR protected you against identitity
spoofing, right, ;-)?