[thelist] hiding email addresses

[Chris Anderson]

> Also if you use a form, please make sure you send the requestor a copy
> of
> the email that's generated. It's a pet peeve of mine to fill out a
form
> and
> not get a copy of the email. Without a copy of the email, I can't
prove
> that
> I did fill out a request and when that request was sent.

Except that now the form can be used to send spam or their xss attacks
to two targets - unless the requestor has to register first and the
requestor email was not overridable