Re: [apps-discuss] Kathleen Moriarty's Discuss on draft-ietf-appsawg-sieve-duplicate-07: (with DISCUSS and COMMENT)

[Stephan Bosch <[e-mail]>]

Hi Kathleen, Barry,

On 6/25/2014 8:36 AM, Stephan Bosch wrote:
>>>>> Script writers using the duplicate test evaluation should be aware that
>>>>> Message-IDs are not necessarily unique either through the fault of
>>>>> benign
>>>>> generators or attackers at some point prior to the Sieve filter
>>>>> injecting a
>>>>> message with the properties used by the duplicate Sieve filter.  As
>>>>> such,
>>>>> script writers may opt to be conservative when considering actions taken
>>>>> on
>>>>> duplicate messages.
>>>> I'm OK with that almost as it is.  If we're really addressing
>>>> Message-IDs I think the last sentence would work better like this:
>>>>
>>>> "Therefore, scripts are well advised to be conservative with respect
>>>> to actions taken when duplicate messages are identified only by
>>>> Message-ID."
>>> I can agree with this text with Barry's modification, but where do you want
>>> to put this? At the end of Section 3 or in the Security Considerations? If
>>> it is best put in Section 3 I should merge it somehow with the last
>>> paragraph.
>> I think it's best to stick it into the Security Considerations.
> OK, will do.

Applied in -08.

Regards,

Stephan.