Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!aioe.org!feeder.news-service.com!news2.euro.net!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <python-python-list@m.gmane.org>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.000
X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'onto': 0.05; 'statistical': 0.05; 'subject:Python': 0.06; 'terry': 0.07; 'python': 0.08; 'folks,': 0.09; 'follows.': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:80.91.229.12': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'received:lo.gmane.org': 0.09; 'solution,': 0.09; 'thrown': 0.09; 'vote.': 0.09; 'am,': 0.14; 'wrote:': 0.14; 'reedy': 0.16; 'subject:server.': 0.16; 'uploading': 0.16; 'jan': 0.20; '(which': 0.20; 'header:In-Reply-To:1': 0.21; 'emailed': 0.23; 'ensuring': 0.23; 'suspect': 0.25; 'parameters': 0.26; 'specified': 0.26; 'meeting': 0.26; 'wondering': 0.28; 'attend': 0.28; 'remote': 0.28; 'subject:web': 0.29; 'server': 0.29; 'voting.': 0.30; 'sort': 0.31; 'vote': 0.32; 'header:X-Complaints- To:1': 0.32; 'someone': 0.33; 'to:addr:python-list': 0.33; 'post': 0.33; 'page.': 0.33; 'example,': 0.35; 'there': 0.35; 'header :User-Agent:1': 0.35; 'votes': 0.35; 'using': 0.35; 'problems': 0.36; 'program,': 0.37; 'too.': 0.37; 'case': 0.37; 'response': 0.37; 'received:org': 0.38; 'problem.': 0.38; 'data': 0.38; 'subject:: ': 0.38; 'some': 0.38; 'should': 0.39; 'header:Mime- Version:1': 0.39; 'legally': 0.39; 'to:addr:python.org': 0.39; 'submitting': 0.40; 'best': 0.60; 'your': 0.60; 'browser': 0.62; 'website': 0.66; 'recorded': 0.67; 'login': 0.69; 'strategies': 0.78; 'subject:Verify': 0.84; 'tracks': 0.91
X-Injected-Via-Gmane: http://gmane.org/
To: python-list@python.org
From: Terry Reedy <tjreedy@udel.edu>
Subject: Re: Strategy to Verify Python Program is POST'ing to a web server.
Date: Sat, 18 Jun 2011 17:17:09 -0400
References: <d8c7dc52-0c54-4b29-a7b6-bcd833686611@q12g2000prb.googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Gmane-NNTP-Posting-Host: rain.gmane.org
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10
In-Reply-To: <d8c7dc52-0c54-4b29-a7b6-bcd833686611@q12g2000prb.googlegroups.com>
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.131.1308431848.1164.python-list@python.org>
Lines: 30
NNTP-Posting-Host: 82.94.164.166
X-Trace: 1308431848 news.xs4all.nl 49039 [::ffff:82.94.164.166]:40963
X-Complaints-To: abuse@xs4all.nl
Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:7926

On 6/18/2011 7:34 AM, mzagursk@gmail.com wrote:
> Hello Folks,
>
> I am wondering what your strategies are for ensuring that data
> transmitted to a website via a python program is indeed from that
> program, and not from someone submitting POST data using some other
> means.  I find it likely that there is no solution, in which case what
> is the best solution for sending data to a remote server from a python
> program and ensuring that it is from that program?
>
> For example, if I create a website that tracks some sort of
> statistical information and don't ensure that my program is the one
> that is uploading it, the statistics can be thrown off by people
> entering false POST data onto the data upload page.  Any remedy?

You have not specified all the parameters of the problem. Are there a 
limited number of copies of your program or are they distrubuted freely? 
What about multiple votes from one program?

Corporate proxy votes (which are a legally important type of statistical 
information) work as follows. Each shareholder is mailed or emailed a 
'control number'. Attend stockholder meeting in person, mail proxy vote, 
or login with any browser with control number. Repeat votes by the same 
control id supercede previous vote. There should be a 'thank you for 
voting' response for each vote. I suspect IP addr. is recorded with vote 
too. I have not heard of specific problems with electronic proxy voting.

-- 
Terry Jan Reedy