I don't think he's talking about forged postings, he's talking about forged SET or UNSUB or SUB requests. But certainly you can secure the posting interface as well as John has kindly pointed out. Nathan