Re: [cobalt-developers] Update of Neomail 1.25 released on pkg.nl.cobalt.com

[Tarren <tarren@xxxxxxxxxxxx>]

Hi Taco,

On Friday, September 14, 2001, at 11:34  pm, Taco Scargo wrote:

> Hi Tarren,
> > Any chance that the Neomail package could be updated to do a check when
> > logging in that the username supplied actually belongs to the virtual
> > site from which it is being accessed?
>
> Why ?

Several reasons that I can think of...

a) If you access Neomail by a domain unrelated to your user-id, you 
cannot send any email, as you end-up with an invalid email address 
(user1@xxxxxxxxxxx - which won't exist) - however, you can read all your 
email, so...

b) If customers are charged transfer usage, they can avoid some by 
reading their email through another customers domain, thereby inflating 
the other customers bill.

Point a) is enough for me, although b) is a consideration too - I just 
know I'm going to get loads of customers try to use the boxes main 
address instead of their own domain, and then complain about not being 
able to send mail!

Regards,

Tarren.