CDR Howto (WIP)

[Riad S. Wahby]

All,

Twelve hours (or maybe three years, depending who you are) later than
promised, here's the first cut at the CDR howto:

http://al-qaeda.net/cpunk/howto.html

Getting it all set up on your end is not terribly difficult. In fact, in
the past I've cobbled together other implementations where everything
was dispatched through procmail filtering on the Received header (the
list ran that way in 2004 for a month or two), so feel free to riff on
the basic config as long as you don't break anything at the boundary.

The part we have to redesign is the way CDR nodes share their subscriber
lists / maintain a common whitelist. In the past this was done with
Majordomo "who", but I think it's a bad idea to enable this.

I propose instead that each node push its local subscription list to the
other nodes, possibly PGP signed to defend against the obvious attack
whereby massive amounts of garbage can be injected into the whitelist
with very little effort. (Yes, someone can still subscribe a massive
number of addresses to a node, but such activity has less leverage and
will draw attention.)

I'll put together the appropriate scripts tonight(ish), and once someone
else has a node set up we can do some testing and put the D back in CDR.

Regards,

-=rsw