Re: [Asrg] request for review for a non FUSSP proposal

Ian Eiloart <iane@sussex.ac.uk> Fri, 26 June 2009 10:18 UTC

Return-Path: <iane@sussex.ac.uk>
X-Original-To: asrg@core3.amsl.com
Delivered-To: asrg@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DD2763A6A58 for <asrg@core3.amsl.com>; Fri, 26 Jun 2009 03:18:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.558
X-Spam-Level:
X-Spam-Status: No, score=-2.558 tagged_above=-999 required=5 tests=[AWL=0.041, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oIiFfRUtMGIx for <asrg@core3.amsl.com>; Fri, 26 Jun 2009 03:18:29 -0700 (PDT)
Received: from karpinski.uscs.susx.ac.uk (karpinski.uscs.susx.ac.uk [139.184.14.85]) by core3.amsl.com (Postfix) with ESMTP id BA1343A6855 for <asrg@irtf.org>; Fri, 26 Jun 2009 03:18:29 -0700 (PDT)
Received: from lewes.staff.uscs.susx.ac.uk ([139.184.134.43]:60491) by karpinski.uscs.susx.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.64) (envelope-from <iane@sussex.ac.uk>) id KLUCMI-0004S1-OA; Fri, 26 Jun 2009 11:18:19 +0100
Date: Fri, 26 Jun 2009 11:17:29 +0100
From: Ian Eiloart <iane@sussex.ac.uk>
Sender: iane@sussex.ac.uk
To: claudio@telmon.org, Anti-Spam Research Group - IRTF <asrg@irtf.org>
Message-ID: <254DA756687142D2C2566841@lewes.staff.uscs.susx.ac.uk>
In-Reply-To: <212.234.174.155.98452337.1245864051@webmail.inet.it>
References: <20090623213728.1825.qmail@simone.iecc.com> <4A41D773.50508@telmon.org> <4A41E506.2010106@mines-paristech.fr> <008E8EE8BFAAE1C24E4F75DF@lewes.staff.uscs.susx.ac.uk> <4A41F87F.4040506@mines-paristech.fr> <812375D23E32D2ADE271A8F2@lewes.staff.uscs.susx.ac.uk> <212.234.174.155.98452337.1245864051@webmail.inet.it>
Originator-Info: login-token=Mulberry:01DQ+5lHZwJ/lOfA32eTWAhCwHc4fa7nA1gno=; token_authority=support@its.sussex.ac.uk
X-Mailer: Mulberry/4.0.8 (Mac OS X)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Sussex: true
X-Sussex-transport: remote_smtp
Subject: Re: [Asrg] request for review for a non FUSSP proposal
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Jun 2009 10:18:31 -0000

--On 24 June 2009 17:20:51 +0000 Claudio Telmon <claudio@telmon.org> wrote:

>
>> > Well, you submited my message to spamcop... ;-). Their address was in
>> > the list of recipients...
>>
>> Sorry - was using my mail client's autocomplete to check the format.
>> Forgot  to delete the address <blush>. Actually, the report isn't
>> complete until I  confirm it, and spamcop probably won't be able to
>> parse the report because  my message to them didn't include your message
>> headers.
>>
>> Hmm, maybe some address harvester will harvest that address and start
>> spamming spamcop directly, cutting me out of the loop! Perhaps I'd
>> better  try to change the address.
>>
>
> This is a joke you made me, isn't it? :)  Spamcop is using address
> tagging, and you happened to demonstrate what I said about the risks that
> tags get disclosed when sending messages to multiple recipients, since
> addresses may be in many places in the body of the message, whereas a
> specific header could be detected and purged by the MUA/MTA...
>

A fair point. Some of the same considerations apply, though, especially 
with regard to obtaining the token.

-- 
Ian Eiloart
IT Services, University of Sussex
01273-873148 x3148
For new support requests, see http://www.sussex.ac.uk/its/help/