Re: Syntax validation of articles by injecting agents

Russ Allbery <rra@stanford.edu> Tue, 05 January 2010 02:19 UTC

Return-Path: <owner-ietf-usefor@mail.imc.org>
X-Original-To: ietfarch-usefor-archive@core3.amsl.com
Delivered-To: ietfarch-usefor-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6E3BC3A6824 for <ietfarch-usefor-archive@core3.amsl.com>; Mon, 4 Jan 2010 18:19:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.746
X-Spam-Level:
X-Spam-Status: No, score=-4.746 tagged_above=-999 required=5 tests=[AWL=1.300, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x0aThh8m9v0f for <ietfarch-usefor-archive@core3.amsl.com>; Mon, 4 Jan 2010 18:19:07 -0800 (PST)
Received: from balder-227.proper.com (Balder-227.Proper.COM [192.245.12.227]) by core3.amsl.com (Postfix) with ESMTP id 140993A67E5 for <usefor-archive@ietf.org>; Mon, 4 Jan 2010 18:19:07 -0800 (PST)
Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id o052CfN6020566 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 4 Jan 2010 19:12:41 -0700 (MST) (envelope-from owner-ietf-usefor@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id o052CfQ0020565; Mon, 4 Jan 2010 19:12:41 -0700 (MST) (envelope-from owner-ietf-usefor@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-usefor@mail.imc.org using -f
Received: from smtp.stanford.edu (smtp4.Stanford.EDU [171.67.219.84]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id o052Cene020557 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <ietf-usefor@imc.org>; Mon, 4 Jan 2010 19:12:40 -0700 (MST) (envelope-from eagle@windlord.stanford.edu)
Received: from smtp.stanford.edu (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id DFFCEC6D1 for <ietf-usefor@imc.org>; Mon, 4 Jan 2010 18:12:39 -0800 (PST)
Received: from windlord.stanford.edu (windlord.Stanford.EDU [171.67.225.134]) by smtp.stanford.edu (Postfix) with ESMTP id 47318C6CD for <ietf-usefor@imc.org>; Mon, 4 Jan 2010 18:12:39 -0800 (PST)
Received: by windlord.stanford.edu (Postfix, from userid 1000) id 3D3582F4D0; Mon, 4 Jan 2010 18:12:39 -0800 (PST)
From: Russ Allbery <rra@stanford.edu>
To: ietf-usefor@imc.org
Subject: Re: Syntax validation of articles by injecting agents
In-Reply-To: <Kvq2LJ.J2r@clerew.man.ac.uk> (Charles Lindsey's message of "Mon, 4 Jan 2010 12:27:19 GMT")
Organization: The Eyrie
References: <35100640C1C848E4A3267B6B4FD3B9ED@Iulius> <87aawzdj5e.fsf@windlord.stanford.edu> <Kvq2LJ.J2r@clerew.man.ac.uk>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.1 (gnu/linux)
Date: Mon, 04 Jan 2010 18:12:39 -0800
Message-ID: <873a2lz4dk.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ietf-usefor@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-usefor/mail-archive/>
List-Unsubscribe: <mailto:ietf-usefor-request@imc.org?body=unsubscribe>
List-ID: <ietf-usefor.imc.org>

"Charles Lindsey" <chl@clerew.man.ac.uk> writes:

> Eh? How does it imply that? If there are no Content-* headers, then
> there is no requirement for MIME-Version.

See Julien's post:

| NN for instance does not generate MIME-Version: header fields
| although "user agents MUST meet the definition of MIME conformance"
| ("a mail user agent that is MIME-conformant MUST always generate
| a "MIME-Version: 1.0" header field in any message it creates").
| I believe this sentence applies to news user agents too, otherwise
| a reference to MIME is useless.

The first quoted statement is from RFC 5536 section 2.3, with an
accompanying reference to RFC 2049.  The second quoted statement is from
RFC 2049 section 2.

Now that I think about it, though, this only places a requirement on the
user agent.  It doesn't require that the server reject the message, so I
think the original problem isn't actually that significant of a problem.
MIME-compliant agents, such as injecting agents, are allowed to accept
non-MIME messages.

> But aren't injecting agents allowed to remove a Path header that is
> received?

See point 2 in Duties of an Injecting Agent in RFC 5537, which requires a
syntax check on the Path header.

> For sure, many of them routinely do. In any case, fixing (or removing) a
> broken header is always a way out of the problem.

Injecting agents are specifically discouraged (SHOULD NOT) from fixing or
remove any header fieldss other than Path.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>