Re: [I18ndir] Review volunteer needed (Fwd: [dispatch] WGLC of draft-ietf-dispatch-javascript-mjs-07)

"Asmus Freytag (c)" <> Thu, 30 April 2020 06:39 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id C0BCD3A0924 for <>; Wed, 29 Apr 2020 23:39:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.996
X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (2048-bit key); domainkeys=pass (2048-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id kS0xZbuOF6_K for <>; Wed, 29 Apr 2020 23:39:24 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 073403A090C for <>; Wed, 29 Apr 2020 23:39:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=dk12062016; t=1588228762; bh=uLlllwB3bobvtQqMItOZIz0RuWu3WwiEIWrg GBs3fUo=; h=Received:Subject:To:References:From:Message-ID:Date: User-Agent:MIME-Version:In-Reply-To:Content-Type:Content-Language: X-ELNK-Trace:X-Originating-IP; b=eIIOT2wGXfIFLXGJ7D2GAi6wOrlFjHckV zfNDhjssX1KTE3RATZK1g3o1xI5hW0m6ku9pbUaJVU3GOmLaRnL0XUzHGcBa+OiAtv1 hfH8SaS+Rc9ePiWkTe/GC/kCIUH5hfFgb4o07UsL4zy8sQ0uqNRMzFzcqzf6E0kImKL x7Fjy0Ioxi+5AdR5S9uEcQm8TWZ8t2a8lRSQoI7iATew6cqOmC53WDye8sgBzU3WnQg M1g2z52mToWw0rvJ+l8KaO/bVLNJ+oE3KCHsAK85WvZ1np7wzoBSWi/Akk81alYaYRk p7pKx2AP3t6Z8edtlcIogsxcjWygAS9kqR6CaAT+A==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk12062016;; b=AprGMh0KN1xfprWHGhlURTMH9AdTMZP6ijJ7S6V+MJU15GdBVcyFX2H53frXDZdT+mQyIvSx/FSfTG6MkNMO7h8WnmVu2U+YiSJQN5R3zGg1F8eAN9jixtl0xKr8qTSQpdB3zovsqQqbaeL/hzdQtgYKyGzPQuLKnJJKiKOnOw2sfdPUDpM6FcB+Y0mGbSZHAI1qduvbr0vZScILKQ2VlM8jTN0SM7iU303KbLKKWIs3WF00hB6E5eDr7B8KSWn83Y0V2I30cQgqLVQmqvyBfd1KUDWzK+mA5CPYyRpgKliJ07T0MTim41nr94vHzOv4+FDV6E4ur84RPkaWbLu2pg==; h=Received:Subject:To:References:From:Message-ID:Date:User-Agent:MIME-Version:In-Reply-To:Content-Type:Content-Language:X-ELNK-Trace:X-Originating-IP;
Received: from [] (helo=[]) by with esmtpa (Exim 4) (envelope-from <>) id 1jU2qu-0003WS-Gu; Thu, 30 Apr 2020 02:39:20 -0400
To: John C Klensin <>,
References: <> <> <31CF68D680D76D7F45FAB3E2@PSB> <> <E67F0F68A403F5E4E5D8F476@PSB> <> <7584276CBB9741AD64AC3863@PSB>
From: "Asmus Freytag (c)" <>
Message-ID: <>
Date: Wed, 29 Apr 2020 23:39:20 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0
MIME-Version: 1.0
In-Reply-To: <7584276CBB9741AD64AC3863@PSB>
Content-Type: multipart/alternative; boundary="------------80187F77D0905B294D005BCD"
Content-Language: en-US
X-ELNK-Trace: 464f085de979d7246f36dc87813833b26976a2cdabd2db7a07a8f4ca514f6867fef845a0cdf9cf26350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
Archived-At: <>
Subject: Re: [I18ndir] Review volunteer needed (Fwd: [dispatch] WGLC of draft-ietf-dispatch-javascript-mjs-07)
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Internationalization Directorate <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 30 Apr 2020 06:39:27 -0000

On 4/29/2020 9:09 PM, John C Klensin wrote:
> (iii) Mislabeled content is just bad news for all sorts of
> reasons as I have been discovering when one of the mail systems
> of a very large vendor are identifying message bodies as
> 'text/plain; charset="UTF-8"' and then sending UTF-16, BOM and
> all.  Anything that can be done to discourage that sort of
> nonsense --or, if not, to describe carefully want should be done
> when it is encountered would be, IMO, A Good Thing.
> The I-D, in its present form, does none of that.

Identifying data that contradict the declaration is the first step.

Tossing it with prejudice would probably be better than fixing it.

However, all of that requires BOM sniffing - I don't think we can
get away from being aware what a BOM is and skipping it
if present -- an "extra" BOM is merely
a redundancy whereas an "inconsistent" one is a contradiction
in terms -- and those are two fundamentally different things.


PS: tossing malformed input for other reasons than BOM might
be cleaner from a security perspective. But not an expert.