From: John Moreno (phenix@interpath.com)
Date: Sat Jul 18 1998 - 00:03:37 CDT
Brad Templeton <brad@templetons.com> wrote:
> On Fri, Jul 17, 1998 at 02:36:51PM -0400, John Moreno wrote:
> > Brad Templeton <brad@templetons.com> wrote:
> > If all articles are signed you *still* can't stop it form being altered
> > and propagated - at *absolute* best you force them to rewrite the "From"
> > address.
>
> Uh, John, what you're saying is that they can cut from your text and paste
> into an article that they post and sign under their own name. Yeah, I
> agree they can do that. It's called a followup.
Not if they use your id, drop From entirely and just include "Sender"
(very non-standard but I doubt if it'd get dropped if it was already in
the stream).
-snip-
> Of course you don't do this if there is collapse. If you want you can
> cache the results of cert scans, but any polite user puts just one
> cert on any normal article.
And what if it is the collapser who is doing the rewriting - all you can
do is eventually discover that it was forged, you can't keep it from
propagating, because it's the people/sites that you "trust" doing it.
-- John Moreno