i just don't think client devs are qualified to speak about the subject of spam mitigation countermeasures, let alone mitigating impersonation attacks or sock puppets i find it incredible that you don't even have experience with running an SSH server on a VPS and have never looked at the endless logs of attackers trying to breach your server with common passwords it's not optional, and your comments, and hzrd149s demonstrate why a network protocol designed by client devs is going to be a failure you don't remember reply guy?