--- /dev/null
+Return-Path: <david@tethera.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by arlo.cworth.org (Postfix) with ESMTP id 403836DE1003\r
+ for <notmuch@notmuchmail.org>; Thu, 3 Mar 2016 09:52:07 -0800 (PST)\r
+X-Virus-Scanned: Debian amavisd-new at cworth.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: -0.035\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=-0.035 tagged_above=-999 required=5\r
+ tests=[AWL=-0.024, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01]\r
+ autolearn=disabled\r
+Received: from arlo.cworth.org ([127.0.0.1])\r
+ by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id q0f0yiN7tL_x for <notmuch@notmuchmail.org>;\r
+ Thu, 3 Mar 2016 09:52:05 -0800 (PST)\r
+Received: from fethera.tethera.net (fethera.tethera.net [198.245.60.197])\r
+ by arlo.cworth.org (Postfix) with ESMTPS id 1F12B6DE014A\r
+ for <notmuch@notmuchmail.org>; Thu, 3 Mar 2016 09:52:04 -0800 (PST)\r
+Received: from remotemail by fethera.tethera.net with local (Exim 4.84)\r
+ (envelope-from <david@tethera.net>)\r
+ id 1abXQU-00028E-MJ; Thu, 03 Mar 2016 12:52:38 -0500\r
+Received: (nullmailer pid 2937 invoked by uid 1000);\r
+ Thu, 03 Mar 2016 17:51:56 -0000\r
+From: David Bremner <david@tethera.net>\r
+To: Johnny Utahh <notmuchmail.org@johnnyutahh.com>, notmuch@notmuchmail.org\r
+Subject: Re: Stolen email list?\r
+In-Reply-To: <56D86143.6040205@johnnyutahh.com>\r
+References: <56D86143.6040205@johnnyutahh.com>\r
+User-Agent: Notmuch/0.21+5~gca076ce (http://notmuchmail.org) Emacs/24.4.1\r
+ (x86_64-pc-linux-gnu)\r
+Date: Thu, 03 Mar 2016 13:51:56 -0400\r
+Message-ID: <87k2ljwitf.fsf@tesseract.cs.unb.ca>\r
+MIME-Version: 1.0\r
+Content-Type: text/plain\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.20\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <https://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch/>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <https://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Thu, 03 Mar 2016 17:52:07 -0000\r
+\r
+Johnny Utahh <notmuchmail.org@johnnyutahh.com> writes:\r
+\r
+> I recently received email sent to my notmuch-based email address that \r
+> was clearly spam. I suspect that notmuch@notmuchmail.org email-address \r
+> list may have been stolen. If you're not already aware.\r
+\r
+I'm not aware of any such event. I've CC'd Carl, who runs the lists.\r
+\r
+If you have e.g. message-ids of suspect messages, that would potentially\r
+let others on the list check if they had also received them.\r
+\r
+I suppose a motivated spammer could scrape the pipermail pages; the\r
+obfuscation there is not exactly difficult to reverse.\r
+\r
+d\r
+\r