From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 2BEXE+P8b2CkggEAgWs5BA (envelope-from ) for ; Fri, 09 Apr 2021 09:06:11 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id KNPoDOP8b2BSTQAAbx9fmQ (envelope-from ) for ; Fri, 09 Apr 2021 07:06:11 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 879C51A1AA for ; Fri, 9 Apr 2021 09:06:10 +0200 (CEST) Received: from localhost ([::1]:57002 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lUlDU-0004vJ-VA for larch@yhetil.org; Fri, 09 Apr 2021 03:06:08 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:57190) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lUlD7-0004uj-3L for emacs-orgmode@gnu.org; Fri, 09 Apr 2021 03:05:45 -0400 Received: from mail-pg1-x52b.google.com ([2607:f8b0:4864:20::52b]:42821) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lUlD5-0001WS-A0 for emacs-orgmode@gnu.org; Fri, 09 Apr 2021 03:05:44 -0400 Received: by mail-pg1-x52b.google.com with SMTP id g35so3185499pgg.9 for ; Fri, 09 Apr 2021 00:05:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=references:user-agent:from:to:subject:date:in-reply-to:message-id :mime-version; bh=VmXqE47TLmspo8gc/5p8XvdkKvcjuzdFTFLzW+o9KCk=; b=kI+BMywDbqSsBG5Sq/WE7QDT4XLBePoNbj7Dq4GoOd/fnsc36aifw3e0q1teHk4Lal iqFZ1n5eTKFdzJ2juxjqQWcqsw1znd/9hzM1VshD/jDmoI3zTZdYzVwp5M0yxluYpGLt yWqY2N92OluJoTfpfPCCaoQhAJ3Bc8tnJGIXMriLjXvlPqeXDPSBRZwKt+69ni1kt7GI B5p1ZHUtIuCNaozkKhaAoQsClG+NBubVA9yACxf4WT2yh2CJCd4JVMWCngtwlruHQ6lM mdIcvxA/0HI52DA0co2LNrrlXI2dhy4BBNz8NLltNwhTHZ8ZWRGB3uhAqC8fK1gIueTW U3Fw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:references:user-agent:from:to:subject:date :in-reply-to:message-id:mime-version; bh=VmXqE47TLmspo8gc/5p8XvdkKvcjuzdFTFLzW+o9KCk=; b=rN7qG2SJujPlfNprF6lfvASQLB4VBSBGC/fZtSGh3jjeaRXmwQ1Udh/x5ELZ8urzWA Hh/Z4scd3aPd3KpGlmaf3iSXgygXUyefZeOuVVAeAvN6xE5hnXBUw1smxo7ssb58VZQk n83Gmo9SvdtZrdMRQR4+n9+Q3vvYJJbhhzMiziEpETNkIpL6pV+zeY3dqVxaFlYRtz2U grK7YHhOs4sg57cu4Te66bWux7a1f7eJMD3Z1M35q5W5on/hGIyDC1vusRbLxuTdiQTN 39sybpS19Y0yPzRKJBsj6NmQs5eW4pprQQ2uuGagiaEWsdMAxiF5HvFL5ojR/SDU7TDc FUbg== X-Gm-Message-State: AOAM530ZwDAGDFKv7vz/ZrNzjeOBO+pCOAH6g8HaPoPptOhVUh8yiBHD j9SrPQJ08WW5w/mIsj8Yo0rANVr4YU0= X-Google-Smtp-Source: ABdhPJwgANFp5PISG2ZflPenEOLZXFV948Qi2UV+VUTBV8O23zN/ymRid0djTSG09wtGeAnDNAF5Wg== X-Received: by 2002:a63:5a55:: with SMTP id k21mr11668958pgm.312.1617951940833; Fri, 09 Apr 2021 00:05:40 -0700 (PDT) Received: from tim-desktop (220-235-1-139.dyn.iinet.net.au. [220.235.1.139]) by smtp.gmail.com with ESMTPSA id l124sm1329135pfl.195.2021.04.09.00.05.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 09 Apr 2021 00:05:40 -0700 (PDT) References: <8735w0ouhf.fsf@kyleam.com> User-agent: mu4e 1.5.11; emacs 28.0.50 From: Tim Cross To: emacs-orgmode@gnu.org Subject: Re: On the protection of emails in the archives Date: Fri, 09 Apr 2021 16:58:12 +1000 In-reply-to: <8735w0ouhf.fsf@kyleam.com> Message-ID: <877dlcvsxs.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2607:f8b0:4864:20::52b; envelope-from=theophilusx@gmail.com; helo=mail-pg1-x52b.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1617951970; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=VmXqE47TLmspo8gc/5p8XvdkKvcjuzdFTFLzW+o9KCk=; b=lVe0wDf9NFMcmY9e9Ggh0GLV9GdCNmkiDtnxBGBUw6IlgKHj589ojYielxZsBrWhKv2roN wJfl+QqljCYzplwE+85KSN4yc+Bkbb4InXL+X3GpfvjbsNQarlcL0MCIp6lvIUSBm6JJT7 d1+eZF1irGnS3nI4mPRqBwCxBJ4VkR0Qb8WrX1U9TQV8rYJHW2/L8ycxyiAnT+vNGmntRt DPUhMupRT+BrS/HxHyZ6I1b3XjXwFouuPDWzm/3ANeByHkirNf9NuBYhm627SYx2DIRV8K FIOaeRuSfJ/SxpOqOu0AMRDXZ0rXfPUk2vHPFgJ5WDPW0r1iFwBq9LICWIEWTQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1617951970; a=rsa-sha256; cv=none; b=YiHcvZ4LBQr2+2mJ6f6MtLOQw+vX20SgGiiNhhwK7QbRVBTKqw9eIaR+F+YJTUJC5uIr7t Qg1qA/hX5MFeRTKDlg+1BocfcmCRPcrrL/0P/na1xHkFKJ8aSIGcqwGEtmxa8EpbLlCtyG g2w9Y8dAVeMODlnO/XamGorskjfLiLoTsxDIjsLmEosGU+AW/8OtKTWXMWwISb1jLV6TYi 8sUJdRBb6o08BRQVBDCaeI82kzxzXLPbEKnw87anW9KcMoDLQK3vaic5GlT+5YWRz/K6KN TBIvjz/Ie4qnJPDSwZ9ihK0V++6JMX+iNhgmQ1t4AtoenWIc7j6PgXgQirVYuQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b=kI+BMywD; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Migadu-Spam-Score: -3.14 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b=kI+BMywD; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Migadu-Queue-Id: 879C51A1AA X-Spam-Score: -3.14 X-Migadu-Scanner: scn0.migadu.com X-TUID: 2oTfsqpiXXoh Kyle Meyer writes: > Guillaume MULLER writes: > >> Hi all, >> >> I recently sent an email on this mailing list (see >> https://orgmode.org/list/b1e778c5-acbf-8a17-c9bf-dcb6693e9845@univ-st-etienne.fr/ >> ) >> >> Since then, I'm receiving spams on the email address I used to send >> the message. >> >> After some research, it seems that this email address only appears on >> 2 websites, notably this orgmode.org mailing list archive. > > Your email address can also be harvested from the lists.gnu.org > archives. Inspect the output of > > $ curl -fSsL https://lists.gnu.org/archive/html/emacs-orgmode/2020-07/msg00125.html > $ curl -fSsL https://lists.gnu.org/archive/mbox/emacs-orgmode/2020-07 > >> Would it be possible to configure the archive to obfuscate / hide the >> email addresses inorder to protect its users? > > and its upstream source > are public-inbox > () archives. There's an option (disabled by > default) to configure address obfuscation. However, in my view email > obfuscation is giving you a false sense of security. Ignoring other > ways spammers get your address, you're posting to a public space, and > your address can be harvested (and, as shown above, not just from these > public-inbox archives). > > And this isn't something specific to Org mode's archives. Just as some > examples, take a look at , > , > , or > . > > Anyway, that being said and despite my opinion on this, I'm considering > turning on obfuscation at and > . There's at least one issue that'd need to > be fixed before doing so though: > . I totally agree. I have no issue if 'hiding' email addresses can be done and has no other unfortunate side effects, but I don't believe it actually achieves much, so don't care if the default is not changed. I think you have to accept that the email address you use in public mail lists is going to be harvested and as others have mentioned, a lot of email harvesting occurs when someone who has your address in their address book has their system compromised. The only sane action is good spam filtering. While I know a lot of people complain about the Google gmail spam filtering, for me it is remarkably accurate. It is unusual for me to see even a couple of spam messages in my inbox every few months. My spam/junk box usually gets around 10-15 messages a day and occasional messages flagged as spam which are not (usually because the sender's mail server isn't doing SPF or any of the other spam prevention headers correctly). Takes me about 1 minute to scan and 'delete forever' each day, so no big problem. -- Tim Cross