On 1-Mar-2009, at 12:50, Joseph Brennan wrote:
If your users are consistently getting their passwords stolen,
then your
users are idiots and you will need to do something like add a
captcha to
the webmail login page.
If it's the Nigerian gangs that have been attacking university web
mail
for about 12 months now, they are phishing your users with official
looking notices that ask the user to send account and password. If
so,
captcha won't do it.
unless you are suggesting that they are MANUALLY logging into the
webmail to then send 1 billion spams, yes it will.
--
Two, Four, Six, Eight! Time to Transubstantiate!