Keith Moore <moore(_at_)cs(_dot_)utk(_dot_)edu> writes:
again, the goal here is to avoid being used to transmit spam or viruses.
Given that DSNs can already be used for this purpose (you almost always
want to include the entire original message in a bounce because otherwise
it may be lost), are we really gaining much by preventing autoresponders
from being used for that?
This strikes me as a flaw inherent in the nature of e-mail bounces.
I once got called in as a consultant for a bank that was using a piece
of software, whose auto-responder would respond with only a brief
annotation, and include the entire subject message in the response. (it
also copied everyone in the to and cc fields)
Copying everyone in the To and Cc fields is obviously wrong.
--
Russ Allbery (rra(_at_)stanford(_dot_)edu)
<http://www.eyrie.org/~eagle/>