From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1M9M96-00060b-Lh for garchives@archives.gentoo.org; Wed, 27 May 2009 16:38:28 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 92E22E072D; Wed, 27 May 2009 16:38:27 +0000 (UTC) Received: from petteriraty.eu (petteriraty.eu [78.47.27.97]) by pigeon.gentoo.org (Postfix) with ESMTP id 622FBE072D for ; Wed, 27 May 2009 16:38:27 +0000 (UTC) Received: from [82.130.46.217] (qiz1.kyla.fi [82.130.46.217]) by petteriraty.eu (Postfix) with ESMTPSA id 2AD2A7B90057 for ; Wed, 27 May 2009 16:38:26 +0000 (UTC) Message-ID: <4A1D6C7C.7090605@gentoo.org> Date: Wed, 27 May 2009 19:38:20 +0300 From: =?UTF-8?B?UGV0dGVyaSBSw6R0eQ==?= User-Agent: Mozilla/5.0 (X11; U; Linux i686; fi; rv:1.8.1.21) Gecko/20090324 Thunderbird/2.0.0.21 Mnenhy/0.7.6.666 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org MIME-Version: 1.0 To: gentoo-project@lists.gentoo.org Subject: Re: [gentoo-project] Spam reduction proposal - switching lists to a web-form for subscription References: In-Reply-To: X-Enigmail-Version: 0.95.7 OpenPGP: url=http://users.tkk.fi/~praty/public.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigE8E1269A700F9C50BBC188B1" X-Archives-Salt: bbc0cbca-3011-4375-abf8-8416860513af X-Archives-Hash: b834757ded9f6ed3ca782a227b7e0575 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigE8E1269A700F9C50BBC188B1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Robin H. Johnson wrote: > Lately we've been seeing a LOT of spam being sent to the mailing list > subscribe mechanism, with the side effect that the subscribe mechanism > responds to the From header address with a confirmation request. That > address (along with the envelope sender) are unfortunately forged. >=20 > The volume of the confirmation requests is getting worse than direct > spams, because the spam filtering considers the confirmation requests t= o > be valid email (they would be, except for the fact they are > unsolicited). >=20 > To combat this problem, I'd like us to consider switching the subscribe= > mechanism for the mailing lists to be a web form (protected with > recaptcha). Unsubscribe will continue to be offered as an email action > for the moment, because it ignores the mail if the address was not > subscribed. >=20 I have no objection to this one as I have been receiving quite a few of these... Regards, Petteri --------------enigE8E1269A700F9C50BBC188B1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkodbHwACgkQcxLzpIGCsLSrOQCgmHPCA4z0oMlmyKAbGxR46g0t TJUAnjDQXS3dELTn2ou8dBSF0dAzPts7 =bpw1 -----END PGP SIGNATURE----- --------------enigE8E1269A700F9C50BBC188B1--