[Mailman-Developers] Crypto-sign to post

Lionel Elie Mamane lionel at mamane.lu
Mon Nov 6 07:39:49 CET 2006


On Fri, Nov 03, 2006 at 04:18:59PM -0800, Nathaniel Gray wrote:

> I can't tell you how many times I've done the "subscribe, disable
> delivery, ask for CC on replies" mambo, and it's getting to the
> point where I just won't bother unless I've got a serious issue.

> The thing is, I don't blame the list maintainers for enabling
> subscribe-to-post -- it's just the only easily accessible solution
> to the spam crisis at this point --

> Carl Worth brought up the idea of a simple option to accept any post
> that's cryptographically signed, regardless of subscriber status.  I
> liked this idea for several reasons.


> 1. I've never seen signed spam
> 2. Most mail programs have some way to sign mails
> 2. When spammers do start signing spam it allows a straightforward
>     transition to a real web-of-trust style model.

You may want to have a look at http://www.non-gnu.uvt.nl/mailman-ssls/
If it cannot do it already, at least it brings a GnuPG-integration
framework that will make it less work to implement what you want.

-- 
Lionel


More information about the Mailman-Developers mailing list