Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.c > #59486

Re: Jacob changes provider

Show all headers | View raw

On 2015-04-02, jacobnavia <jacob@jacob.remcomp.fr> wrote:
> I have managed to get the "eternal september" account working now, and I 
> will post all my messages from there. I hope that server doesn't allow 
> people to post in my name, and fake messages can be then be detected easily.

A decent news posting client can be scripted to add a signature which contains
a URL like:

  ---
  Check this posting's validity with the following URL:
  http://www.jacob-navia.example.com/validate-msgid?<message-id-string>

The URL leads back to your server. If it resolves, it validates the message ID.
If the message ID in the URL in the signature matches the one in the article
headers, we can have a high confidence that it's genuine.

Without hijacking the web server or the domain, the forger has to resort to
message ID re-use, in order to forge signature URL's that resolve.

But the page to which a URL resolves can show a small summary of the emessage:
like the date and subject line. If some old message-ID is fraudulently re-used
by a forger for a new posting, it will be obvious because the URL page will
show an old date.

The forger could register a typo-squatting domain:

  Check this posting's validity with the following URL:
  http://www.jacob-nevia.example.com/validate-msgid?<message-id-string>

that would only fool a few people for a little while.

Back to comp.lang.c | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Jacob changes provider jacobnavia <jacob@jacob.remcomp.fr> - 2015-04-02 19:15 +0200
  Re: Jacob changes provider Kaz Kylheku <kaz@kylheku.com> - 2015-04-02 19:20 +0000
    Re: Jacob changes provider Noob <root@127.0.0.1> - 2015-04-02 21:50 +0200
      Re: Jacob changes provider Ian Collins <ian-news@hotmail.com> - 2015-04-03 09:05 +1300
        Re: Jacob changes provider Noob <root@127.0.0.1> - 2015-04-02 22:57 +0200

csiph-web