X-Mw-EBS Email Blacklist Process

[Osjtya]

Hi @twisted1919,

I was checking a feature EBS and reached it via Email Header: X-Mw-EBS: http://example.com/lists/block-address

This allow anybody to put as many email ids they want to block permanently so I think this can be manipulated, if somebody wishes to. I believe there should be a confirmation email sent to requested recipient to be blocked to confirm permanent block.

Where can I find if someone blocks using this form? Because I'm unable to see them under Blacklist.

What you think? Thanks

 

[twisted1919]

@Osjtya - Well, if you add an address there it won't be blocked right away, the administrator should still approve it and only then it will be blacklisted, this is why i believe we're safe.

 

[frm.mwz]

@Osjtya - Well, if you add an address there it won't be blocked right away, the administrator should still approve it and only then it will be blacklisted, this is why i believe we're safe.

Seems to me, better would be, to send confirmation for this, just as for unsubscribe or for profile update, so that abuse/manipulation is prevented.