Re: signing headers

New Message Reply About this list Date view Thread view Subject view Author view

From: Brad Templeton (brad@templetons.com)
Date: Fri Jul 31 1998 - 00:16:33 CDT


On Fri, Jul 31, 1998 at 12:33:24AM -0400, Seth Breidbart wrote:
> >A good injector doesn't add stuff except Path.
>
> At this point (when articles aren't signed and verified), it also adds
> some information so the site can determine who posted it.

Only rarely. On a signed article, all it needs do is confirm if the
signer is the poster, in which case there is no need for it to add
the poster's identity -- it is already in the message and digitally
signed.

However, if we use the Path line spec that I drafted, it does not need
to add a header. I provide a syntax for using the currently
unusued final component of the path line to store any sort of diagnostic
information the site desires about the poster.

There is really no need to add either NNTP_Posting host or Originator-Info.
They can be coded into the final element of the path line in any way
the injector wishes -- it is the only one that needs to interpret such things.

Frankly though, I have always found such additions to be wasteful. The
injector should really just place the information in a log file, which it
can look up by message-id. Why should the injector place all this
information in the article just so it is transmitted and stored millions
of times on other people's sites just to save it the trouble of appending
a line to a log file?


New Message Reply About this list Date view Thread view Subject view Author view


This archive was generated by hypermail 2b29.