Comment on Why David Petraeus’s Gmail account is a national security issueparentComments−Daniel_Newby13yThe blacklist can be compromised, which is a larger vulnerability than having no blacklist.−samt13ySave only the hash, or use a data structure like a bloom filter.−toomuchtodo13yI blacklist is modified, notify me via SMS (the same way Google/Facebook can handle you not able to get into your account).−TeMPOraL13yIt's not about modifying; just reading the addresses you don't want to send mails to is informing enough.−toomuchtodo13yDon't display them to the user without two-factor authentication then. Everything can be compromised at some point.
Comments
The blacklist can be compromised, which is a larger vulnerability than having no blacklist.
Save only the hash, or use a data structure like a bloom filter.
I blacklist is modified, notify me via SMS (the same way Google/Facebook can handle you not able to get into your account).
It's not about modifying; just reading the addresses you don't want to send mails to is informing enough.
Don't display them to the user without two-factor authentication then. Everything can be compromised at some point.