On Wed, May 27, 2009 at 10:58 AM, Bob Beck <b...@obtuse.com> wrote:
> Oh please. like the address coming from "openbsd.org" matters... It's
> *email*...
>
You seem to have misunderstood my comment.
If e-mail address "A" is in the set {"legit", "potentially spoofed"}, then
you have to have additional measures to determine which set it's in.
If e-mail address "B" is not in the set {"legit", "potentially spoofed"},
then you certainly shouldn't assume it's legit.
The quoted e-mail wasn't from openbsd.org. Assuming it's legit is nonsense.
--
Computers are like air conditioners...
They quit working when you open Windows.
