From: "Shaun Cooley (shcooley)" <shcooley@cisco.com>
To: "secdir@ietf.org" <secdir@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>
Thread-Topic: secdir review of draft-ietf-appsawg-sieve-duplicate
Thread-Index: Ac+SNLXgaJ1IgESXR/mrYhXBOpOkGA==
Date: Fri, 27 Jun 2014 18:25:29 +0000
Message-ID: <187A7B1DA239514F9146FC78B19AADE322D5E076@xmb-aln-x10.cisco.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/secdir/VS3AGjhQBPTcecYnfhzf-gwnc7k
Cc: "draft-ietf-appsawg-sieve-duplicate.all@tools.ietf.org"
 <draft-ietf-appsawg-sieve-duplicate.all@tools.ietf.org>
Subject: [secdir] secdir review of draft-ietf-appsawg-sieve-duplicate
Precedence: list

I have reviewed this document as part of the security directorate's ongoing=
 effort to review all IETF documents being processed by the IESG.  These co=
mments were written primarily for the benefit of the security area director=
s.  Document editors and WG chairs should treat these comments just like an=
y other last call comments.

This document defines a new test command for the Sieve email filtering lang=
uage that allows for the detection of duplicate emails, as identified by me=
ssage ID, or more complex string matching in the headers or other parts of =
the message.

The document is easy to understand and covers the primary potential issue o=
f resource exhaustion that might arise from a flood of messages with unique=
 IDs.  I consider this document to be READY for publication.

-Shaun