Bruce Perens: > Ian is right about security of WWW transactions. It's a problem > with the mailing-list CGI forms. The problem is that the user isn't > identified when a CGI form is submitted. I didn't claim that WWW transactions were secure. I claimed that SMTP transactions were no more secure than WWW transactions. All you really have to go on (aside from message content) is the machine that talked to you. -- Raul