[Mailman-Users] Hide email address of specific sender

Stephen J. Turnbull stephen at xemacs.org
Tue Jun 9 06:55:37 CEST 2015

Mark Sapiro writes:

 > To: the_list at ...
 > Sender: her_real_address at ...
 > From: the_list_or_some_bogus_address at ...

*Don't* recommend using a bogus address -- that requires skill on the
part of the user.  The list address is "known good", use that.

Problem example: if she's not at yahoo.com and uses a fake yahoo.com
address, DMARC will cause bounces from random users whose providers
respect p=reject.  Of course you can mitigate this, but it's just
*one* example, there are plenty of other ways this could go wrong, and
explaining the constraints to the user just isn't worth the effort.

Larry's answer (get a throwaway address) is the one that protects her
privacy best, though.  A sufficiently persistent attacker can probably
trace her through the authenticating IP, but that would be a lot of
effort.  Use of an alias (eg, AOL screen name) or the Sender header
probably exposes her "real" mailbox far too much for her comfort.

More information about the Mailman-Users mailing list