Anyway, I've been thinking more on this suggestion and would refine it.
related to ignoring in-game users
The key only needs to be sent to you when you join a game (for players currently in-game) and when players join a game not every message.
I'm still not certain on method of encryption/hashing. While it would be nice to use some sort of public method, these methods either aren't complex enough or aren't 1:1. I private method might be more workable.
I still don't see a problem with that at all ven. If you make a list to be a douche and put random players on it, people simply will not use your list. That's the same it works with say adblock. If the list I'm using blocks legit websites from my use, I don't subscribe to that list. As for somebody who legitimately wants to ignore you, neither you nor I see a problem with this. The ENTIRE system breaks down when we cannot share our block lists. It is up to the individual user to decide if they would rather use a shared list for ease of use vs personally craft one, which might be more suited to their needs but would take magnitudes longer in terms of time.
-edit-
logon is pretty complex, that was worth jumping through. Authenticators are very complex on wow accounts, they're becoming worth jumping through. If a person is able to do it, in any way at all, if you can log in, a bot can log in. This is not meant to keep out bots, it's meant for you to choose to ignore them and keep those choices.
[ Post edited by Kaylin ]
Formerly Bob_the_Evil @ USWest
Yes, my account is still active, no, you can't have my stuff.