From fork-admin@xent.com  Mon Aug 12 11:11:04 2002
Return-Path: <fork-admin@xent.com>
Delivered-To: yyyy@localhost.netnoteinc.com
Received: from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id 4026F440F3
	for <jm@localhost>; Mon, 12 Aug 2002 05:57:16 -0400 (EDT)
Received: from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Mon, 12 Aug 2002 10:57:16 +0100 (IST)
Received: from xent.com ([64.161.22.236]) by dogma.slashnull.org
    (8.11.6/8.11.6) with ESMTP id g7BL0hb13882 for <jm@jmason.org>;
    Sun, 11 Aug 2002 22:00:44 +0100
Received: from lair.xent.com (localhost [127.0.0.1]) by xent.com (Postfix)
    with ESMTP id F19F2294142; Sun, 11 Aug 2002 13:57:05 -0700 (PDT)
Delivered-To: fork@spamassassin.taint.org
Received: from relay.pair.com (relay1.pair.com [209.68.1.20]) by xent.com
    (Postfix) with SMTP id DBD24294136 for <fork@xent.com>; Sun,
    11 Aug 2002 13:56:12 -0700 (PDT)
Received: (qmail 75874 invoked from network); 11 Aug 2002 20:57:16 -0000
Received: from adsl-66-124-225-210.dsl.snfc21.pacbell.net (HELO golden)
    (66.124.225.210) by relay1.pair.com with SMTP; 11 Aug 2002 20:57:16 -0000
X-Pair-Authenticated: 66.124.225.210
Message-Id: <005301c24179$ac92b820$640a000a@golden>
From: "Gordon Mohr" <gojomo@usa.net>
To: "fork" <fork@spamassassin.taint.org>
References: <Pine.LNX.4.33.0208111330190.3981-100000@hydrogen.leitl.org>
Subject: Re: Forged whitelist spam
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-Msmail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: fork-admin@xent.com
Errors-To: fork-admin@xent.com
X-Beenthere: fork@spamassassin.taint.org
X-Mailman-Version: 2.0.11
Precedence: bulk
List-Help: <mailto:fork-request@xent.com?subject=help>
List-Post: <mailto:fork@spamassassin.taint.org>
List-Subscribe: <http://xent.com/mailman/listinfo/fork>, <mailto:fork-request@xent.com?subject=subscribe>
List-Id: Friends of Rohit Khare <fork.xent.com>
List-Unsubscribe: <http://xent.com/mailman/listinfo/fork>,
    <mailto:fork-request@xent.com?subject=unsubscribe>
List-Archive: <http://xent.com/pipermail/fork/>
Date: Sun, 11 Aug 2002 13:57:15 -0700

Eugen Leitl writes:
> On Sun, 11 Aug 2002, Gordon Mohr wrote:
> 
> > If you crypto-sign your outgoing mail, you don't have to set your
> > mailwall whitelist to accept unsigned mail spoofed as being from you.
> 
> Users don't like entering passphrases when sending email. USB fobs, smart 
> cards or other removable hardware are not yet widespread.

Bad assumption.

A reasonable UI would have me enter my passphrase *at most* each 
time I launch my mail program -- never more than once per day,
sometimes once per week. 

For some of myy workstations, I'd even be happy with the necessary
signing key being cached on disk, so signing is automatic when I
hit 'send'.

If spammer code can read my local hard disk, I have bigger problems
than spoofed spam.

- Gordon


http://xent.com/mailman/listinfo/fork


