[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#207300: tmda: Challenge-response is fundamentally broken



This one time, at band camp, Adam McKenna said:
> Stephen,
> 
> TMDA does not ship with any defaults, except a couple of customizable
> text files (templates).  It is entirely up to the user to create a TMDA 
> configuration along with his own whitelist and filter directives.
> 
> TMDA is actually not just a C-R system.  C-R is only part of the system.  It
> is also has a very powerful and configurable mail filter, and it is also a
> Mail Delivery Agent.  You can read about the features of TMDA at
> http://tmda.net/features.html
> 
> I don't have a problem with adding documentation, in fact I had already
> planned on adding a note to README.Debian on the next release listing the
> addresses that the user should be sure to whitelist if he expects to be able
> to communicate with the BTS.

Well, if it ships essentially disabled, and has to be purposefully
enabled to do any harmful behavior by the user, and there is
documentation included that lets the user know about whitelisting and so
forth, that takes care of all of my objections.  I see no reason for
this to be RC either, but that's just IMHO.

Good luck with the debate,

Steve (who still hates C-R systems :)
-- 
 -----------------------------------------------------------------
|   ,''`.					     Stephen Gran |
|  : :' :					 sgran@debian.org |
|  `. `'			Debian user, admin, and developer |
|    `-					    http://www.debian.org |
 -----------------------------------------------------------------

Attachment: pgpVswLXorA2B.pgp
Description: PGP signature


Reply to: