An alternative would be to drop login requirements completely – Debian mailing lists work just fine, and on a large percentage of them, anybody can post without

An alternative would be to drop login requirements completely – Debian mailing lists work just fine, and on a large percentage of them, anybody can post without any password whatsoever. But email spamfiltering is likely more advanced than similar routines for web fora.