Re: [MORG] Review of draft-ietf-morg-fuzzy-search-02.txt

[Alexey Melnikov <[e-mail]>]

Barry Leiba wrote:
>> This is not a proper text for this section, as I don't think this is true.
>> It would be better to say that this document doesn't add additional security
>> considerations not already present in implementations of ESEARCH, SORT, etc.
>>     
> I agree.
>   
>> But maybe we should think harder about this in the case of this document.
>>     
> We did think about it, and we think it's correct that it doesn't add
> additional ones.
>
> Did you have anything specific in mind?
>   
Only some vague thoughts:

1) This might be too implementation specific, but should we point out 
possible buffer overflows and other nastiness with fuzzy indexing 
systems that might be used at the backend?

2) It might be worth mentioning that fuzzy search might cause 
Deny-of-Service attacks on the IMAP server. Implementations of this 
extension are likely to consume more disk space, memory and/or CPU.