On Fri,  11 Dec  1992 03:33:38  IST David  Sitman <[log in to unmask]>
said:
 
>Users can not delete themselves  because of the "Validate= All commands"
>parameter. It is not new and it  has very little to do with transmission
>method. This is an  issue that Eric Thomas and I  have crossed swords on
>in the past. For the rationale behind this parameter and its effect, see
>the document LISTKEYW  MEMO. I tried unsuccessfully to  convince Eric to
>abolish it or change it just because  of lists like the one you mention:
>subscription is open,  so anyone can fall into the  list innocently, but
>you can only get off the list when the list owner sends a delete command
>with a valid password.
 
As you said it is not new that there are a lot of keywords one can set to
all sorts of  values, and LISTSERV does not try  to detect configurations
which are "stupid". For instance you can have a list for which anyone can
join, nobody is notified  when people join and leave, but  you have to be
on the list to review the archives.  And you can have a list where anyone
can join  but signoff  requests from non-local  users require  list owner
approval. I  run a number  of lists with  this latter feature  but closed
subscription, or then confidential lists where  all users are local and I
see no reason to  give hackers an easier time than  needed, and don't see
why I should give it up such because it can be misused in other cases.
 
  Eric