[Mailman-Developers] Interesting study -- spam on posted addresses...

[John Morton]

On Tuesday 19 February 2002 04:21, Jay R. Ashworth wrote:
> On Sun, Feb 17, 2002 at 09:37:31PM -0800, Chuq Von Rospach wrote:
> > > I never understood why mailman wasn't changed to allow users to change
> > > there own addresses years ago. Being able to add valid receiving
> > > addresses would help, too. That is also something mailman can help
> > > with.
> >
> > All it takes is code. Volunteering? (grin)
>
> Because there's not a sufficiently strong method of authenticating that
> the person trying to change the address is actually the *user*?

No, it just involves squashing the two actions a user needs to take into one, 
more obvious action - rather than subscribe a new address, confirm it, then 
delete the old address and confirm it, you change the address (keeping the 
settings), and confirm both dropping the old address and sending to the new
one as a pair of emails. Iff both confirmations succeed, the address changes,
otherwise it stays as it was. Adding other valid sending addresses will also 
require an email confirmation action.

John