usefor-article-06 November 2001

6.14.  Approved

   The Approved header indicates the mailing addresses (and possibly the
   full names) of the persons or entities approving the article for
   posting.

      Approved-content    = From-content  ; see 5.2

   Each mailbox contained in the Approved-content MUST be that of the
   person or entity in question, and one of those mailboxes MUST be that
   of the actual injector of the article.
   An Approved header is required in all postings to moderated
   newsgroups. If this header is not present in such postings, then
   relaying and serving agents MUST reject the article. Please see
   section 8.2.2 for how injecting agents should treat postings to
   moderated groups that do not contain this header.

   An Approved header is also required in certain control messages, to
   reduce the risk of accidental posting of same.

        NOTE: The presence of an Approved header indicates that the
        person or entity identified claims to have the necessary
        authority to post the article in question, thus enabling sites
        that dispute that authority to refuse to accept or to act upon
        it. However, the mere presence of the header is insufficient to
        provide assurance that it indeed originated from that person or
        entity, and it is therefore desirable that it be included within
        some digital signature scheme (see 7.1), especially in the case
        of control messages (section 7).

--- ../usefor-article-05/Approved.out          July 2001
+++ ../usefor-article-06/Approved.out          November 2001
@@ -9,17 +9,22 @@
    Each mailbox contained in the Approved-content MUST be that of the
    person or entity in question, and one of those mailboxes MUST be that
    of the actual injector of the article.
-[This is the start of an attempt to strengthen this header. It should be
-a TOSSable offence to put a dummy or invalid address in here. Later,
-when we have some form of authentication, I would hope to be able to say
-more.]
-
    An Approved header is required in all postings to moderated
    newsgroups. If this header is not present in such postings, then
    relaying and serving agents MUST reject the article. Please see
    section 8.2.2 for how injecting agents should treat postings to
    moderated groups that do not contain this header.
+
    An Approved header is also required in certain control messages, to
-   reduce the risk of accidental posting of same; see the relevant parts
-   of section 7.
+   reduce the risk of accidental posting of same.
+
+        NOTE: The presence of an Approved header indicates that the
+        person or entity identified claims to have the necessary
+        authority to post the article in question, thus enabling sites
+        that dispute that authority to refuse to accept or to act upon
+        it. However, the mere presence of the header is insufficient to
+        provide assurance that it indeed originated from that person or
+        entity, and it is therefore desirable that it be included within
+        some digital signature scheme (see 7.1), especially in the case
+        of control messages (section 7).