> I agree that we can't have the database containing submitter's email addresses.
> They change too often, and I don't want someone to start UCE targeting me for
> CD's that I don't own already, based on my email address that is attached to CD
> indexes that I have submitted!
Hm. You could store all emails from "first submissions" on the server
which gets the request and remove email addresses from the db before
it gets distributed.
This requires the submitter to use the same server (as for first
submission) again if he wants to submit changes, which should not be
too bad. (better than no change possibility at all).
I.e. each server only knows the email addresses of people who did a
"first submission" of a entry, all other server have that field empty
and therefore reject change-requests.
Additionally a rule (in the license?), that emails collected with an
instance of the server software running somewhere may not be used for
any other purpose than for authenticating further subsmission to this
db server, would be nice, I guess.
Bye,
Benjamin.