On Tue 2017-05-16 13:29:21 +0100, Jonathan Knight wrote:

I think the real name if its available and the list owner address if not. If you use the local part (e.g. j.knight) would still make it possible to guess the @keele.ac.uk if the mailing lists are all hosted on maillists.keele.ac.uk.

surely it's easy for an attacker to guess moderation-free sender addresses by a quick scan of the list archives as well. what attackers are we really trying to defend against here?

--dkg