On 20/03/2008, Harry Duncan <usr....@gmail.com> wrote:

Thanks to everybody for all the replies to my original post. Harry's point about catching outbound messages was one that I hoped somebody could answer, also assuming I write a "maildrop" like filter, how do I capture the AUTH information associated with the message? I guess I might have to start hacking some of the "core" parts of Courier (perhaps "submit"?), this sounds like rather more work than I thought.

As far as comments about the suitability of the proposal to avoid fraud, I accept that there are plenty of ways of circumventing it, however IMHO most of these require an in-depth understanding of the operation of e-mail that most potential fraudsters would lack. [In fact I'm often surprised by the extent that the inner workings of e-mail seem such a mystery to many in IT.]

I'm not too sure about how to handle multi-part and MIME encoded mail, one idea is, rather than a standard signature at the bottom of the mail, put a standard salutation at the top (a sort of electronic equivalent of headed notepaper). Any reactions?

Harry.