At 05:03 PM 10/13/03 -0700, Justin Mason wrote:
Matt Kettler writes:
> I could possibly see it becoming a configfile option, much like use_bayes,
> in which case I'd guess the command line would be deprecated, but I don't
> ever see it becoming a default without a lot of people (myself included)
> posting strong objections to the SADev team.

Er, Matt, it is the default ;)  There's now a "use_auto_whitelist"
config setting and -a does nothing.

As a general note on this thread to the list, and to summarize my off-list reply to Justin in a less detailed manner, I retract any truly strong objections to the AWL being on by default, but I do still have some objections to it and feel it's a not a good idea (although not a horribly stupid one).


The fact that the AWL now ignores userconf type rules such as static white and blacklists, as well as GTUBE, eliminates the score-smearing vulnerability that plagued earlier versions of SA when an AWL is used in a site-wide manner. This was a serious issue, but is no longer an issue.

However, there are still some manners in which the AWL can be abused for some minor gains, and I've explained this to Justin (I felt it best not to detail this to the world). That general situation leaves me feeling that having it on by default makes it a target for possible abuse. However the gains for spammers aren't as high as with other issues in SA that they've abused in the past.

Since the scope of the problem is pretty limited, I don't see a need to go bonk some sense into the devels with a nerf baseball bat as I feared I might have to. They're aware of the bigger picture more-so than I am, so they can make reasonable decisions based on the information I gave Justin.

Sorry for any confusion I may have created by not realizing that a mountain had been reduced to a molehill while I wasn't looking, and congrats to the developers for plowing some of those mountains down.





-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to