[转发：论坛电子邮件通知、PBL 黑名单及维基注册]
首次公开证据
打开首次公开证据查看 1 个交叉存档
来源说明
Published on GitHub in February 2024 as part of Martti Malmi's testimony in the COPA v. Wright trial
这里再发一次有关 PBL 的信息。
-------- 原始邮件 --------
主题：论坛电子邮件通知、PBL 黑名单及维基注册
日期：Thu, 29 Jul 2010 03:18:56 +0100
发件人：Satoshi Nakamoto satoshin@gmx.com
收件人：Martti Malmi mmalmi@cc.hut.fi
http://www.bitcoin.org/smf/index.php?topic=338.0
……在电子邮件黑洞名单上，或者至少托管注册用电子邮件服务器的 ISP 在其中某个名单上。
“看起来 bitcoin.org 被列入了 PBL。” http://www.spamhaus.org/pbl/query/PBL340779
我认为我们的问题可能在于开启了论坛通知，比如收到私信时给你发电子邮件，但新账户却没有电子邮件验证。有人能不能在未经验证的情况下填入别人的电子邮件地址，然后让系统往那里发送内容？我们需要立刻阻止这种情况，以免它被用于不好的事情。要么禁用所有通知，要么确保电子邮件地址经过验证。
我更倾向于禁用通知，或任何由论坛给你发送电子邮件的功能。我有点喜欢不强制进行电子邮件验证。但如果这是确保我们不会向未经验证的地址发送电子邮件的唯一办法，那么也可以这样做。
如果我们申请从 PBL 中移除，最好先确保这个问题已经得到妥善控制。
我把 Registration->settings->registration of new members 改成了“Member Activation”。我想这意味着会通过电子邮件进行验证。 “成员激活 启用此选项后，任何注册论坛的成员都会收到一封包含激活链接的电子邮件，他们必须点击该链接，之后才能成为正式成员”
我认为这是确保论坛不会被用来向别人的电子邮件地址发送内容、进而可能被用于发送垃圾邮件的唯一办法。
英文原文
展开英文原文
Here's the info about PBL again.
-------- Original Message --------
Subject: Forum e-mail notifications and PBL blacklist and wiki registration
Date: Thu, 29 Jul 2010 03:18:56 +0100
From: Satoshi Nakamoto satoshin@gmx.com
To: Martti Malmi mmalmi@cc.hut.fi
http://www.bitcoin.org/smf/index.php?topic=338.0
of e-mail blackhole list or at least the ISP that hosts the e-mail server for registration is on one of those lists.
"Looks like bitcoin.org is listed on the PBL." http://www.spamhaus.org/pbl/query/PBL340779
I think our problem may be that we have forum notifications on, like e-mail you when you receive a PM, but we don't have e-mail verification of new accounts. Can someone put someone else's e-mail address without verifying it, then have stuff sent there? We need to stop that right away before it gets used for something bad. Either disallow all notification, or make sure e-mail addresses are verified.
I'm more inclined to disallow notifications or anything where the forum sends you e-mail. I kinda like not requiring e-mail verification. But if that's the only way to make sure we don't send e-mails to un-verified addresses, then we could do that.
If we request to get off of PBL, we'd better make sure we've got the problem secured first.
I changed Registration->settings->registration of new members to "Member Activation". I assume that means it e-mail verifies. "Member Activation When this option is enabled any members registering to the forum will have a activation link emailed to them which they must click before they can become full members"
I think that's the only way to make sure the forum can't be used to send to other people's e-mail addresses and potentially use it to spam.