Re: [Extra] Sieve REJECT and :fcc [was Re: Meeting minutes and notes from today]

Stan Kalisch <stan@glyphein.mailforce.net> Thu, 04 January 2018 23:34 UTC

Return-Path: <stan@glyphein.mailforce.net>
X-Original-To: extra@ietfa.amsl.com
Delivered-To: extra@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EA1B1273E2 for <extra@ietfa.amsl.com>; Thu, 4 Jan 2018 15:34:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level:
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mailforce.net header.b=b6YW8bhe; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=W52cRAC1
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tf4SnZpaGIIT for <extra@ietfa.amsl.com>; Thu, 4 Jan 2018 15:34:26 -0800 (PST)
Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B268126CF9 for <extra@ietf.org>; Thu, 4 Jan 2018 15:34:25 -0800 (PST)
Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id CB84020A92 for <extra@ietf.org>; Thu, 4 Jan 2018 18:34:24 -0500 (EST)
Received: from frontend1 ([10.202.2.160]) by compute7.internal (MEProxy); Thu, 04 Jan 2018 18:34:24 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailforce.net; h=content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; bh=NMmXef8Zqd/NnA/nCzgJa7864Op5M oKoLg9EaukPfCY=; b=b6YW8bheKsPQzCpj7oQwEJGFVg86F+hjVacLqYJUAVwoz RSeTc8KdPyE8XuDIv546VUmdm/gSXY9Yc0LrIc0KO2JAiQZa6uHtdxa5EXGRrLNX /K3HBA8TSOOnvIvjrHNtRGJ4sAs3wOQuXQiNS32EwP2+o7eFL+UCNhk0Hi0FXP15 vR8kU4Fm9DKjWhteNSmQ6E+2VvXgk/hN997FJK+9w549bpVzrTZJ3nWS6w4viG6Z 7qKNIXF9TfMxfZjQPffnCgrovA1IP50IkZpqpzbZxBznKB2TfFrOFWZnRdzlpqAt PNTesyv8kiyEUcMsglTEeR/KeP+GmIMQANLCLFrVQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=NMmXef 8Zqd/NnA/nCzgJa7864Op5MoKoLg9EaukPfCY=; b=W52cRAC1a/h0zy7wL7fSls NIcQSYiWB39zharOBo4siVwLkTbl6KJIfu/Eovh54U6gLfJ2FwJt+YrHf3igJokF T75iiopKEUHkQhnDGboBUbPtcqQBgnMSNU+8zlwS25t0RPn071mL8ynIPUUCOvkq dgzkMhWd2RdhRaLzuy0ZZ1Yrg+dvbkcFd8E9K1fSY4kc6naZjGygJ0JYrI/Gd1Sx +7GvVrmUeMGfN5y+crihLUhstBa3zCXbXQAnkEWOgftMJrNYFzikbyAJvPfGQunb Bid5rkYzW5u+WxEXAyaZEMXXvp2OXVbFS5ZLhdZp8lC7O5at+Ml/9cOXpeYUcz/g ==
X-ME-Sender: <xms:ALpOWuu5eYN8IGA_cxD_V8s9BIZaSLTXdaHtDnixU9Lj5foOoqmU4g>
Received: from [192.168.1.71] (108-84-31-27.lightspeed.tukrga.sbcglobal.net [108.84.31.27]) by mail.messagingengine.com (Postfix) with ESMTPA id 7455C7E3D4 for <extra@ietf.org>; Thu, 4 Jan 2018 18:34:24 -0500 (EST)
References: <1510734636.1704307.1173072248.27572238@webmail.messagingengine.com> <C0D8D552-4B1C-49D9-8CCC-E6F57F225C1A@glyphein.mailforce.net> <1515028094.3135331.1223576440.053F86DC@webmail.messagingengine.com> <01QNFXVO7LVS000051@mauve.mrochek.com> <BE46D703-89FF-4250-BFF8-EB194729D4CF@glyphein.mailforce.net> <4ae4f1d5-bf40-483a-ae88-befe01d3adef@gulbrandsen.priv.no>
From: Stan Kalisch <stan@glyphein.mailforce.net>
Content-Type: text/plain; charset="us-ascii"
X-Mailer: iPhone Mail (13G36)
In-Reply-To: <4ae4f1d5-bf40-483a-ae88-befe01d3adef@gulbrandsen.priv.no>
Message-Id: <7C65B98D-6755-4957-A181-CBA08354D11B@glyphein.mailforce.net>
Date: Thu, 04 Jan 2018 18:34:22 -0500
To: extra@ietf.org
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
Archived-At: <https://mailarchive.ietf.org/arch/msg/extra/Hws_VKSBJiUfjR2DZX1m8Vuzbfk>
Subject: Re: [Extra] Sieve REJECT and :fcc [was Re: Meeting minutes and notes from today]
X-BeenThere: extra@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Email mailstore and eXtensions To Revise or Amend <extra.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/extra>, <mailto:extra-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/extra/>
List-Post: <mailto:extra@ietf.org>
List-Help: <mailto:extra-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/extra>, <mailto:extra-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Jan 2018 23:34:28 -0000

> On Jan 4, 2018, at 4:33 PM, Arnt Gulbrandsen <arnt@gulbrandsen.priv.no> wrote:
> 
> Stan Kalisch writes:
>> Perhaps, but, after all, reject already provides that facility.

I should have been more precise and said "can accommodate" that facility.  As RFC 5429 says:

"Making "reject" compatible with actions that cause mail delivery violates the RFC 5321 [SMTP] principle that a message is either delivered or bounced back to the sender.  So bouncing a message back (rejecting) and delivering it will make the sender believe that the message was not delivered.

"However, there are existing laws requiring certain organizations to archive all received messages, even the rejected ones.  Also, it can be quite useful to save copies of rejected messages for later analysis."

>> But that's not the central point of my argument in favor of allowing reject to invoke :fcc.
>> 
>> Some users have arguably (at least, certainly morally) legitimate reasons to lie about the delivery of mail.
> 
> You can also argue that software has a duty to serve its user.
> 
> If the user wants to send mail claiming that 2+2=7 on Tuesdays, that the check is in the mail, or that he/she hadn't received that other mail, that's the user's business. The software's duty is to serve its master.
> 
> (But as I said in another message, sieve may serve two masters, and even if the software will loyally lie in the name of one master, that doesn't mean one of the masters should be able to force the software to lie in the name of the other.)

And as reject already minimally allows a user to do that (lie about the reason a message was rejected), this sounds to me like something that should be left to the discretion of an administrator.  For some systems, the administrator is going to want to give primacy to the user's privacy; for others, the administrator is going to desire to give primacy to accountability to some entity or organization.  To me, this seems like a fair trade-off.  I do concede that's not entirely consistent with RFC 5429's language about archiving leaving the decision up to the "implementation" and that that's something that has to be considered.


Thanks,
Stan