Gentoo Archives: gentoo-project

From: Kent Fredric <kentnl@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Spoofing on list -> Infra response re SPF
Date: Mon, 05 Dec 2016 20:52:32
Message-Id: 20161206095202.65eb5db7@katipo2.lan
In Reply to: Re: [gentoo-project] Spoofing on list -> Infra response re SPF by "William L. Thomson Jr."
1 On Mon, 05 Dec 2016 15:22:15 -0500
2 "William L. Thomson Jr." <wlt-ml@××××××.com> wrote:
3
4 > I was meaning for anyone with @gentoo.org. Like commits must be signed.
5 > Its one thing to spoof another list member. No outsider should be able to pose
6 > as an @gentoo.org address.
7
8 But that means you have to require signing when the from is @gentoo.org , but not otherwise.
9
10 Which means @gentoo.org can still spoof @example.org :)
11
12 I'm not really complaining here, I just don't think it would be consistent,
13 only a double standard.

Replies

Subject Author
Re: [gentoo-project] Spoofing on list -> Infra response re SPF "William L. Thomson Jr." <wlt-ml@××××××.com>