> Date: Tue Jul 23, 2002  02:02:20 PM US/Pacific
> I know you're sitting there asking yourself, "who is the most evil
> person on the planet?".  Wonder no more, your local search engine
> will tell you.  Just search for the phrase +"<person> is EVIL" and
> let the internet tell you the real truth.  I used two engines to
> FoIB mailing list -- Bits, Analysis, Digital Group Therapy

from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id 2AF374417C
	for <jm@localhost>; Mon, 12 Aug 2002 05:57:18 -0400 (EDT)
from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Mon, 12 Aug 2002 10:57:18 +0100 (IST)
from xent.com ([64.161.22.236]) by dogma.slashnull.org
    (8.11.6/8.11.6) with ESMTP id g7BMpob17088 for <jm@jmason.org>;
    Sun, 11 Aug 2002 23:51:51 +0100
from lair.xent.com (localhost [127.0.0.1]) by xent.com (Postfix)
    with ESMTP id 560D5294190; Sun, 11 Aug 2002 15:50:07 -0700 (PDT)
from tux.w3.org (tux.w3.org [18.29.0.27]) by xent.com (Postfix)
    with ESMTP id 23EDB294142 for <fork@xent.com>; Sun, 11 Aug 2002 15:49:49
    -0700 (PDT)
From fork-admin@xent.com  Mon Aug 12 11:11:29 2002

>>On Sun, 11 Aug 2002, Gordon Mohr wrote:
>>>If you crypto-sign your outgoing mail, you don't have to set your
>>>mailwall whitelist to accept unsigned mail spoofed as being from you.
Yup, I've been meaning to cobble together procmail + script for this, as
a few Google searches didn't turn up anything. Did anyone here get there
(I guess I want a config file of mailboxes who normally sign their mail,
and procmail that runs gpg and adds headers...)
>>Users don't like entering passphrases when sending email. USB fobs, smart
>>cards or other removable hardware are not yet widespread.
> A reasonable UI would have me enter my passphrase *at most* each
> time I launch my mail program -- never more than once per day,
FWIW, the 'Enigmail' add-on for Mozilla's mail client has it happily
talking to GPG (and I believe PGP). You can choose how long it remembers
your passphrase for, default is 15 mins.
This feature was enough to get my off my Pine habit, since (to answer
the original question) the combination of SpamAssassin and shared
whitelists means that forged 'From:' headers are pretty much the only