From: Charles Lindsey (chl@clw.cs.man.ac.uk)
Date: Wed Feb 20 2002 - 08:41:18 CST
In <Pine.LNX.3.91.1020218153549.16780A-100000@darkstar.prodigy.com> Bill Davidsen <davidsen@prodigy.com> writes:
> I think the core of this scholarly discussion is that some of us
>believe that an injector should insert a spamable address when, and only
>when, hell freezes over. Any other action is going to compromise the
>user's privacy, and since we have other headers for accountability in
>case of abuse, the sender header should be more clearly defined:
I agree that the Injector-Info header is the proper header to use for
accountability issues. There are various ways of using it, and if the user
does not like the way his injector uses it, he can vote with his feet. I
do not accept John Stanley's argument that the user does not know in
advance what the injector will do. If you sign up with an ISP to provide
you with a posting service, then you get the service that ISP chooses to
provide. Tough!
But the situation we are faced with is that much current practice uses
the Sender header for accountability purposes. Do we outlaw that?
>The Sender header is used to indicate the person or software which has
>provided the article on behalf of the originator. It is set by the
>submitter and MUST NOT by provided or modified by the injector. An
>injector which determines that the From and/or Sender header is incorrect
>SHOULD reject the article.
OK, that is one clear position we could take. But I also hear Russ arguing
for the current practice (though would Injector-Info with a suitable
option not do as well for his INN problem?). So my inclination, in the
face of conflicting views, is to leave it as in the recently posted
snapshot. But if I hear further cogent views ...
>If you want to put in a warning that some injectors historically have
>modified Sender, that would be a valuable warning to the user.
Well yes, that warning is there under the From header, and I think it has
to remain.
-- Charles H. Lindsey ---------At Home, doing my own thing------------------------ Tel: +44 161 436 6131 Fax: +44 161 436 6133 Web: http://www.cs.man.ac.uk/~chl Email: chl@clw.cs.man.ac.uk Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K. PGP: 2C15F1A9 Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5