From: Ian Davis (iand@fdc.co.uk)
Date: Tue Sep 09 1997 - 19:13:35 CDT
Simon Lyall wrote:
> An "Originator-Info" header MUST be generated by an injecting agent
> and included in every Usenet article. If it is already present when
> an injecting agent receives the article then it SHOULD be removed (if
> it is incorrect) and a correct version added.
>
> The injecting agent is responsible for ensuring that the
> information present in this header correctly identifies the poster
> or posting host. If this header is incorrect or not present then the
> injecting agent is assumed to take full responsibility for the
> article.
This still doesn't give any secure authentication. it's not impossible
to set up a news feed of your own and become the injecting agent.
Spammers can put whatever they like in this header including other
server names.
.id.