[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [pbmserv] Email address trouble!



On Sat, Feb 21, 2004 at 08:37:22PM -0500, Arthur J. O'Dwyer wrote:
> Why bother with the whole user-identification scheme involving passwords
> and whatnot, if the system really only cares about the e-mail address in
> the "From:" field?

Because it is trivially easy for anyone who knows what ey's doing to put 
an arbitrary address in the From field. So if you know your opponent's 
email address, you could move for both sides.