Re: [apps-discuss] Alissa Cooper's Discuss on draft-ietf-appsawg-sieve-duplicate-07: (with DISCUSS and COMMENT)

[Barry Leiba <[e-mail]>]

> I would still be interested in discussing this bit of my DISCUSS:
>
> o Section 6:
> Sieve scripts that include duplicate tests contain potentially sensitive
> information (e.g., subject or body strings).

Actually, no more so than any Sieve script.  Filtering on patterns is
reasonably common, and I don't think duplicate detection will increase
that.

> So it seems like the scripts
> should be confidentiality protected in transit. I checked with Barry and he
> said that there is no RFC that specifies if/when scripts should be
> protected in
> transit, and I understand that this document is probably not the right
> place to
> specify required behavior there, but I'd like to discuss (more with the ADs
> than the authors) if there is some plan for specifying that behavior
> somewhere.

As I said when you checked with me, this is entirely out of scope for
this document.  If someone should want to do an update to ManageSieve
or some such, that'd be fine, but it's got nothing to do with this
extension.

Barry