Message Board

Bugs & Development

Showing email addresses on mail server pages

Author: M.Nordhoff (23 Aug 06 12:14pm)

Since spammers at least sometimes use real email addresses that they've harvested as the from addresses in spam, I don't think it's a good idea to show the addresses completely unobfuscated in the statistics pages for mail servers. Spam harvesters have got to occasionally go through this website, and it would be pretty bad if people got spammed due to Project Honey Pot publishing their addresses.

Re: Showing email addresses on mail server pages

Author: M.Prince (23 Aug 06 12:37pm)

Good point I have to confess I hadn't thought of.

I think the solution is to use Javascript or something to obscure the email addresses when someone isn't logged in. When you are logged in, we probably will continue to display them as we would normally.

Thanks for the suggestion!

Re: Showing email addresses on mail server pages

Author: M.Nordhoff (24 Aug 06 10:20am)

SpamSpan is an interesting, GPLed piece of JavaScript that lets you obfuscate the addresses in the source code but unobfuscate them with JavaScript: http://www.spamspan.com/

Re: Showing email addresses on mail server pages

Author: M.Prince (25 Aug 06 11:38pm)

This is fixed.

The email addresses on the IP Inspector pages are now encoded with Javascript. They display normally, but should be immune from harvesting.

Thanks for the suggestion!

Re: Showing email addresses on mail server pages

Author: M.Nordhoff (27 Aug 06 1:04pm)

Thanks for implementing the suggestion. :)