I don't think he's talking about forged postings, he's talking about
forged SET or UNSUB or SUB requests.  But certainly you can secure the
posting interface as well as John has kindly pointed out.

Nathan