Strange Messages from Amazon.com

[Matthew Flaschen]

Brian Behlendorf wrote:
> They see if they can subscribe an address to the list, by forging a
> subscription request to list-subscribe at host.org from an address they
> know will auto-reply to the subscription confirmation.

Ah, I see.  Could we make it a little more difficult to confirm
subscription, such as requiring the link or some sort of CAPTCHA?

Matthew Flaschen

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opensource.org/pipermail/license-discuss_lists.opensource.org/attachments/20070119/4251137f/attachment.sig>