It may be worth reiterating that I (or anyone) can open my (or anyone's) mailbox with a pair of bobby pins. This "authentication protocol" may not be worth making too much hay over.