[Mailman-Developers] Fwd: Bounce action notification

M.-A. Lemburg mal at lemburg.com
Thu Feb 27 18:03:13 EST 2003


Chuq Von Rospach wrote:
> 
> On Thursday, February 27, 2003, at 02:33  AM, M.-A. Lemburg wrote:
> 
>> The hash idea sounds interesting, but how do you manage to convert
>> the hash back to an email address ?
> 
> you don't. Since I use a one-way hash (for various security reasons), 
> you store the hash in the record with the email address, and then 
> compare hashes. same general concept as an encrypted password.

Ah, ok.

> One reason you do that is so that people can't script your CGIs to 
> extract your subscription list programmatically, since the hash gives 
> them no hook to hack your cgis with.

So you have a third notion for identifying members... the hash
address; in addition to LCE and KEY. Sounds like the data storage
scheme needs an update :-)

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Software directly from the Source  (#1, Feb 27 2003)
 >>> Python/Zope Products & Consulting ...         http://www.egenix.com/
 >>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________
Python UK 2003, Oxford:                                     33 days left
EuroPython 2003, Charleroi, Belgium:                       117 days left




More information about the Mailman-Developers mailing list