Re:Security

At 10:26 AM -0500 3/1/01, Jeff Crist is rumored to have typed:

If I am using a list as a newsletter, couldn't someone simply spoof a return address that is the same as the administrators e-mail address and still post to the list?

Depends. Do you have a maintainer password set up? If you're _really_ security-consious, you could easily write your own cross-checvk routines in rc.custom.s00 to check for your sooper-sekret header field value, or something in the subject, or...or... Ain't open source grand? You can make it as secure as you desire, and in such a way that even someone familiar with SmartList couldn't break it. Charlie