[Mailman-Users] [Mailman-Developers] USE_ENVELOPE_SENDER

[Barry Warsaw]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Feb 9, 2009, at 5:47 AM, Ian Eiloart wrote:

>
>>> I agree that the use of USE_ENVELOPE_SENDER as an anti-spoof is
>>> outdated, particularly because it doesn't even come into play for  
>>> the
>>> member/nonmember decision.
>>
>> Strike three. :)
>>
>
> Our LMTP code is intended to make this decision before the message  
> headers are even seen. Perhaps that makes the whole  
> USE_ENVELOPE_SENDER option redundant.

I think so too.  How's that coming along?

Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)

iEYEARECAAYFAkmR640ACgkQ2YZpQepbvXGjOgCeKZyrV9XlzokN1X05OJ/gmNMf
trgAoItdNYDwKHwMH10r5S6bfwdI3lZq
=VnvI
-----END PGP SIGNATURE-----