Re: [apps-discuss] Kathleen Moriarty's Discuss on draft-ietf-appsawg-sieve-duplicate-07: (with DISCUSS and COMMENT)

[Kathleen Moriarty <[e-mail]>]

Thank you, Stephan, the updated text looks good and I cleared my discuss.
 Thanks for taking time to work through the discussion and resulting text.


On Thu, Jun 26, 2014 at 4:12 AM, Stephan Bosch <[e-mail]> wrote:

> Hi Kathleen, Barry,
>
> On 6/25/2014 8:36 AM, Stephan Bosch wrote:
> >>>>> Script writers using the duplicate test evaluation should be aware
> that
> >>>>> Message-IDs are not necessarily unique either through the fault of
> >>>>> benign
> >>>>> generators or attackers at some point prior to the Sieve filter
> >>>>> injecting a
> >>>>> message with the properties used by the duplicate Sieve filter.  As
> >>>>> such,
> >>>>> script writers may opt to be conservative when considering actions
> taken
> >>>>> on
> >>>>> duplicate messages.
> >>>> I'm OK with that almost as it is.  If we're really addressing
> >>>> Message-IDs I think the last sentence would work better like this:
> >>>>
> >>>> "Therefore, scripts are well advised to be conservative with respect
> >>>> to actions taken when duplicate messages are identified only by
> >>>> Message-ID."
> >>> I can agree with this text with Barry's modification, but where do you
> want
> >>> to put this? At the end of Section 3 or in the Security
> Considerations? If
> >>> it is best put in Section 3 I should merge it somehow with the last
> >>> paragraph.
> >> I think it's best to stick it into the Security Considerations.
> > OK, will do.
>
> Applied in -08.
>
> Regards,
>
> Stephan.
>



-- 

Best regards,
Kathleen