Re: [cobalt-users] & sign in email addresses and usernames

["Steven Werby" <steven-lists@xxxxxxxxxxxx>]

Debbie Doerrlamm <wkdwich@xxxxxxxxxxxx> wrote:
> Just looking thu my notes here looking for sometig else.. and I think I
> found a way for you to do this..
> go look at:
> http://www.cobalt.com/support/kb/search.php3?ques=mail&qid=441&language=1

This KB doc states:
"This disables all checking on the e-mail alias. Just be sure that people don't
try to intercept mail for other sites on that RaQ."

I'm not sure if the checking referred to means the characters within the email
address.  In any case the second statement above seems like a pretty major
security threat.  I don't want user@xxxxxxxxxxx to be able to alias
something@xxxxxxxxxxx and intercept domain2.tld's mail.  If domain2 uses a
catch-all account it's a very real possibility.  Of course, if you are the sole
user of your RaQ or you trust your users it's not an issue.

Steven Werby {steven-lists@xxxxxxxxxxxx}