Sheldon Hearn wrote:
> However, since this will be used in a large number of installations,
> any header name I generate can be "figured out" and then abused.
You could use an MD5 string, generated from a password, and factor in
the message length, so it would still be identifiable, but not abused
without your password. e.g:
2. Adding a cryptographic "scanning done" header
in:
http://duncanthrax.net/exiscan-acl/exiscan-acl-examples.txt
cheers,
c.