Re: RFC931 (was Re: Fake headers on Internet mail)

Article View: comp.security.misc

Article #382

Back to comp.security.misc Previous Next

#382

From: Marcus J. Ranum
Date: Fri, 14 Aug 1992 19:50

16 lines
1227 bytes

nelson@reed.edu (Nelson Minar) writes:

>First of all it seems like not many sites are running RFC 931 type
>code. I don't know why this is, but it makes it considerably harder to
>count on it for authentication. 

	You can't count on RFC931 type stuff for "authentication". You
can count on it for "information"; possibly useful, and possibly
correct, but you really have no way of being sure. That is a whole LOT
different from "authentication".

	A good metric to use to determine if you have "authentication"
is to ask yourself if a bank would let you make withdrawals based on
it.

mjr.

Technical Details

Message-ID: <1992Aug14.195017.7009@decuac.dec.com>

Path: arc1-ca.pugleaf.net!sparky!uunet!gatech!darwin.sura.net!haven.umd.edu!decuac!hussar.dco.dec.com!mjr

References: <1992Aug14.150204.5296@mp.cs.niu.edu> <1992Aug14.173113.5978@fwi.uva.nl> <1992Aug14.191748.11505@reed.edu>

Show Full Headers

Complete Article Headers

Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!gatech!darwin.sura.net!haven.umd.edu!decuac!hussar.dco.dec.com!mjr
From: mjr@hussar.dco.dec.com (Marcus J. Ranum)
Subject: Re: RFC931 (was Re: Fake headers on Internet mail)
Message-ID: <1992Aug14.195017.7009@decuac.dec.com>
Sender: news@decuac.dec.com (USENET News System)
Nntp-Posting-Host: hussar.dco.dec.com
Organization: Digital Equipment Corporation, Washington ULTRIX Resource Center
References: <1992Aug14.150204.5296@mp.cs.niu.edu> <1992Aug14.173113.5978@fwi.uva.nl> <1992Aug14.191748.11505@reed.edu>
Date: Fri, 14 Aug 1992 19:50:17 GMT
Lines: 16

Reply to Parent Message