Re: [ietf-822] Expires header field

Russ Allbery <eagle@eyrie.org> Wed, 09 November 2022 17:26 UTC

Return-Path: <eagle@eyrie.org>
X-Original-To: ietf-822@ietfa.amsl.com
Delivered-To: ietf-822@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75D1AC14F72F for <ietf-822@ietfa.amsl.com>; Wed, 9 Nov 2022 09:26:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.206
X-Spam-Level:
X-Spam-Status: No, score=-4.206 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KWoUxJuWfer9 for <ietf-822@ietfa.amsl.com>; Wed, 9 Nov 2022 09:26:53 -0800 (PST)
Received: from haven.eyrie.org (haven.eyrie.org [166.84.7.159]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89776C1522B0 for <ietf-822@ietf.org>; Wed, 9 Nov 2022 09:26:52 -0800 (PST)
Received: from lothlorien.eyrie.org (96-90-234-101-static.hfc.comcastbusiness.net [96.90.234.101]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by haven.eyrie.org (Postfix) with ESMTPS id C00241185A7; Wed, 9 Nov 2022 09:26:51 -0800 (PST)
Received: by lothlorien.eyrie.org (Postfix, from userid 1000) id A9B7EB437D2; Wed, 9 Nov 2022 09:26:20 -0800 (PST)
From: Russ Allbery <eagle@eyrie.org>
To: John Levine <johnl@taugh.com>
Cc: ietf-822@ietf.org, mcr+ietf@sandelman.ca
In-Reply-To: <20221109104715.024D24EC686A@dhcp-862b.meeting.ietf.org> (John Levine's message of "9 Nov 2022 10:47:13 +0000")
Organization: The Eyrie
References: <20221109104715.024D24EC686A@dhcp-862b.meeting.ietf.org>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
Date: Wed, 09 Nov 2022 09:26:20 -0800
Message-ID: <87r0yc9gzn.fsf@hope.eyrie.org>
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-822/EyTytoj65sfySwZQlqDQlwLuA3w>
Subject: Re: [ietf-822] Expires header field
X-BeenThere: ietf-822@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Discussion of issues related to Internet Message Format \[RFC 822, RFC 2822, RFC 5322\]" <ietf-822.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-822>, <mailto:ietf-822-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-822/>
List-Post: <mailto:ietf-822@ietf.org>
List-Help: <mailto:ietf-822-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-822>, <mailto:ietf-822-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Nov 2022 17:26:57 -0000

"John Levine" <johnl@taugh.com> writes:
> It appears that Michael Richardson  <mcr+ietf@sandelman.ca> said:

>> A place where it would be useful is when dealing with reports from cron
>> jobs or other monitoring systems where one really would like a frequent
>> report of a fault, but don't need to keep all thousand previous ones.
>> A supersedes would also help, but meh.

> Usenet has both.  Expires is widely implemented since usenet expires
> everything anyway, and this just provides advice to adjust the
> expiration date.  Supersedes has incredible security problems so I don't
> know anyone who implements it.

INN implements it, but as with unauthenticated cancels it's frequently
disabled by the local administrator.  (This may be what you meant.)

Supersedes is not a good idea without message authentication, a nut that
we've never been able to truly crack for either Netnews or email.  The
latest attempt in Netnews is RFC 8315, which is specified for Supersedes
as well as cancels.  It's probably too early to tell if this will catch on
and work in practice.

Expires is less of a challenge since one can just reject nonsensical
values and it otherwise doesn't matter that much.

(That said, a lot of modern news servers use cyclic buffers for storing
news instead of files in the file system, and INN's implementation of that
concept only supports shortening the expiration, not lengthening it.)

-- 
Russ Allbery (eagle@eyrie.org)             <https://www.eyrie.org/~eagle/>