You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2004/06/25 09:08:03 UTC

Re: svn commit: rev 22094 - incubator/spamassassin/trunk/build

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Daniel Quinlan writes:
> jm@apache.org writes:
> 
> > forgot hashcash in the change announcement mail
> 
> I think we should deactivate hashcash by default or remove it.  I think
> spammers have more CPU than me, this is just asking for some spammer to
> make use of all that zombie CPU.
> 
> It was a nice idea (as you recall, I thought highly of it in 2003 too),
> but I think it has been appropriately discredited.

- -1.

Bear in mind that it does nothing unless the user specifies
"hashcash_accept" for (one of) the addresses in the hashcash token.
There's no default accept list, so spammers can mint tokens for everyone
all over the internet without affecting a very large proportion of them.

I think that's very likely to restrict its use to nonspam senders.

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFA289TQTcbUG5Y7woRAv+sAJ4+dOeakLiv+bvONBdd/whZfyx8dgCdGxUp
cTsuVENKuHbg/xgD81BiXso=
=4uCo
-----END PGP SIGNATURE-----