To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.admin.nntpOpen lugnet.admin.nntp in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 Administrative / NNTP / 847
846  |  848
Subject: 
Re: Email Authentication - Why not make it optional?
Newsgroups: 
lugnet.admin.nntp, lugnet.general
Date: 
Wed, 20 Jun 2001 06:09:59 GMT
Viewed: 
925 times
  
Brad you rasie some good points, my take is that if you are being Spoofed
you might not know it untill it's too late and someone has either ruined
your reputaion or you seem to be held in low regard when you post and you
don't know why because some one spoofed you.

It's too bad we just can't go one a merit basis. But alas we do need
protection. I am concerned that the posts will slow down a bit. We may lose
some real time interactivity. I know that my e-mail server sometimes takes a
while to recive new messages. But so far the authentication comes right away.

All I can say is keep up, people don't let this slow us down, thanks Todd
for keeping our best interests at hand.

Eric



In lugnet.admin.nntp, Brad Hamilton writes:
This email authentication is driving me nuts!  A lot of people were already
timid about posting and now its going to be worse.

Since this has happened, I've seen one reply of the nature "Great - I'm so
happy you did this!" post and a huge number of "This is such a hassle, why
are we doing this" posts.  Presumably, the one positive post is from the one
person (or maybe there were two) that had this problem.

Why are we punishing the whole community for a problem that only one or two
people had?  This is even more annoying given that this is the first time
I've heard about this happening (so presumably, the likilihood of this
happening again is low as well).

Why can't this authentication be an optional feature?  Why not let the one
or two people who are actually worried about being spoofed turn it on and
let everyone else post without authorization???

Why not have a web page where you can toggle your status on/off (perhaps
generated from a key sent by email)?

I would immediately turn mine off and leave it off unless I actually started
having problems with people stealing my identity (which I think is unlikely
in the extreme).

I think that the default should be OFF and when you subscribe to LUGNET, you
get a message saying "Security Warning: We recommend that you turn this on
if blah blah blah...."  I seriously doubt that anyone is going to spoof the
identity of some new, unknown member.

I personally believe that the spoofing that went on was probably an isolated
case by one individual.  Are we going to let that one attack stifle the life
out of LUGNET???



Message is in Reply To:
  Email Authentication - Why not make it optional?
 
This email authentication is driving me nuts! A lot of people were already timid about posting and now its going to be worse. Since this has happened, I've seen one reply of the nature "Great - I'm so happy you did this!" post and a huge number of (...) (23 years ago, 19-Jun-01, to lugnet.admin.nntp, lugnet.general)

42 Messages in This Thread:



















Entire Thread on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact
    

Custom Search

©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR