Re: spamcop

["Michael Marsh" <michael.a.marsh@gmail.com>]

On 9/27/06, Kamaraju Kusumanchi <kamaraju@bluebottle.com> wrote:
> If murphy is sending spamtraps, it deserves to be listed. period.

Um, murphy sends confirmation email to any address registered through
the web interface.  Even if you changed this to email-to-subscribe
without a web option, addresses can be spoofed.  This isn't about spam
coming from murphy, it's about a denial of service attack against it.

I suppose another option is to have the confirmations handled by a
different host, though this still allows an attacker to DoS the
confirmation server through spamcop, so that people using spamcop can
no longer subscribe nor unsubscribe.

--
Michael A. Marsh
http://www.umiacs.umd.edu/~mmarsh
http://mamarsh.blogspot.com