Ah yes, the sole exception to this security sacrifice is spammers. You have to keep them out, no matter the cost.
Posterous does a good job of keeping them out, I think, because I've never seen a spam post.
Posterous does a good job of keeping them out, I think, because I've never seen a spam post.
If spammers already have a list of "valid" email addresses, how long before they start randomly hitting post@postereous.com with spoofed headers on a regular basis?