Mark Crispin | 1 Apr 2006 01:53

draft-szego-wcor-imap-00.txt


I just became aware of this document.  I don't think that IMAP is the 
right place for this functionality.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.

Alexey Melnikov | 1 Apr 2006 21:16
Favicon

Re: CONDSTORE


Ken Murchison wrote:

> Alexey Melnikov wrote:
>
>> Ken Murchison wrote:
>
>>> And what should be done for STATUS HIGHESTMODSEQ when the mailbox 
>>> doesn't support CONDSTORE?  I assume that the server should just 
>>> ignore the HIGHESTMODSEQ status item, in the same way that it will 
>>> have to ignore the SELECT/EXAMINE CONDSTORE parameter.
>>
>> Right.
>
> Hmm, the ABNF for the STATUS response requires at least one 
> status-att.  So what should we do for:
>
> a STATUS mailbox (HIGHESTMODSEQ)
>
> Return a HIGHESTMODSEQ of zero, or don't return * STATUS for the 
> mailbox?  I'm assuming the latter.

The latter, but I guess the document can be updated to say that the 
former means "modseq are not supported for the mailbox".

Barry Leiba | 3 Apr 2006 20:34
Picon
Favicon

Re: More on LISTEXT


> 1) Leave things as they are - getting annotations will result in getting 
> the standard flags all over again.
> 
> 2) Add a new STDFLAGs return option such that if a RETURN is specified, 
> then standard flags are only returned if STDFLAG is present as one of 
> the return options. If there is no return option, then the normal 
> behaviour occurs.
> 
> 3) Add a new NOSTDFLAGS return option such that if specified in RETURN, 
> the standard flags are not returned.

I AM VERY STRONGLY AGAINST 2.
As Dave has already pointed out, this is a specification nightmare, 
giving all return options the side-effect of turning off the default 
STDFLAGS, and requiring that it be specified.

As a document editor, I WILL NOT put it in unless the WG chair (Hi 
Pete!) declares consensus for it.

I would be willing to add STDFLAGS if it's the case that extended LIST 
does NOT normally return them, and so we *always* have to ask for them 
explicitly.  But I don't like it; I'd rather behave more like the 
base-doc LIST command in this regard.

I will be happy to add NOSTDFLAGS (or some other such text) that 
EXPLICITLY tells LIST to deviate from the normal behaviour.

I will point out a couple of things:

(Continue reading)

Timo Sirainen | 4 Apr 2006 12:43
Picon
Picon
Favicon

Re: More on LISTEXT

On Mon, 2006-04-03 at 14:34 -0400, Barry Leiba wrote:
> > 1) Leave things as they are - getting annotations will result in getting 
> > the standard flags all over again.
> > 
> > 2) Add a new STDFLAGs return option such that if a RETURN is specified, 
> > then standard flags are only returned if STDFLAG is present as one of 
> > the return options. If there is no return option, then the normal 
> > behaviour occurs.
> > 
> > 3) Add a new NOSTDFLAGS return option such that if specified in RETURN, 
> > the standard flags are not returned.
..
> I would be willing to add STDFLAGS if it's the case that extended LIST 
> does NOT normally return them, and so we *always* have to ask for them 
> explicitly.  But I don't like it; I'd rather behave more like the 
> base-doc LIST command in this regard.

Actually this is how I originally read the 2) part. Never returning
flags unless asked sounds good to me..

> I will be happy to add NOSTDFLAGS (or some other such text) that 
> EXPLICITLY tells LIST to deviate from the normal behaviour.

I'm not really against this either.
Mark Crispin | 4 Apr 2006 23:15

[Imap-protocol] authentication condition reporting extensions

The question has come up about possible extensions to what may optionally 
be reported by the server due to authentication conditions.  Obviously, 
there is substantial security sensitivity here.

The conditions in question are:
  . password will expire at such-and-such future time (or interval)
  . password has expired
  . account will expire at such-and-such future time (or interval)
  . account has expired
  . account has been disabled

It is desired to include a URL that will provide more information.

Currently, the only way to do this is with ALERT, but perhaps it would be 
useful if the client could know about some of these.

Example (with both ALERT for compatibility and new response code)

* NO [EXPIRED http://imap.example.com/expired]
tag NO [ALERT] Your account has expired, contact the help desk

Comments?

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.
_______________________________________________
Imap-protocol mailing list
(Continue reading)

Dave Cridland | 4 Apr 2006 23:33

Re: [Imap-protocol] authentication condition reporting extensions


On Tue Apr  4 22:15:01 2006, Mark Crispin wrote:
> The conditions in question are:
>  . password will expire at such-and-such future time (or interval)
>  . password has expired
>  . account will expire at such-and-such future time (or interval)
>  . account has expired
>  . account has been disabled
> 
> 
That last is definitely a security issue, isn't it?

It'd be useful to be able to signal all the SASL codes that are in 
ACAP - TRANSITION-NEEDED, for instance, or AUTH-TOO-WEAK.

> Example (with both ALERT for compatibility and new response code)
> 
> * NO [EXPIRED http://imap.example.com/expired]
> tag NO [ALERT] Your account has expired, contact the help desk
> 
> Comments?

I'm not convinced all clients will understand untagged responses 
inside an AUTHENTICATE command - I think Alexey and Corby abandoned 
that syntax style for the RECONNECT work a while back at least partly 
due to that concern.

Also, I don't think that the alert is needed here - clients typically 
report the text of the error after a failure, so I suspect you're 
safe using the terminal response:
(Continue reading)

Arnt Gulbrandsen | 5 Apr 2006 12:02
Picon
Favicon
Gravatar

postaddress, several addresses


What if there are several addresses which will cause email to be 
delivered to a mailbox? What should postaddress report?

Arnt

Alexey Melnikov | 5 Apr 2006 12:08
Favicon

Re: postaddress, several addresses


Arnt Gulbrandsen wrote:

> What if there are several addresses which will cause email to be 
> delivered to a mailbox? What should postaddress report?

If they are all equivalent - any.

Arnt Gulbrandsen | 5 Apr 2006 12:34
Picon
Favicon
Gravatar

Re: postaddress, several addresses


Alexey Melnikov writes:
> If they are all equivalent - any.

Why "any" not "all"?

Arnt

Alexey Melnikov | 5 Apr 2006 13:40
Favicon

Re: postaddress, several addresses


Arnt Gulbrandsen wrote:

>Alexey Melnikov writes:
>  
>
>>If they are all equivalent - any.
>>    
>>
>Why "any" not "all"?
>  
>
What would the client do if the server returns multiple? Pick one at random?
I think the IMAP server is in a better position to decide which address 
to return.


Gmane