Comment by dcurtis

I think they do some checking in the headers. It's not impossible to masquerade as someone.

But how many people want to maliciously post to some random person's Posterous blog? Probably not too many.