HIGHESTMODSEQ tracking

Timo Sirainen tss at iki.fi
Fri Aug 1 15:13:31 UTC 2014


On 15 Jul 2014, at 23:13, Michael M Slusarz <slusarz at curecanti.org> wrote:

>>> For the "more than 50% market share" of Dovecot / Cyrus, do you have a
>>>> breakdown by version number? At least in terms of 1.* vs 2.0 and higher?
>>>> 
>>> 
>>> I do not.
>> 
>> 
>> And without being able to get a version number from a Dovecot session (or
>> so it seems to me -- nothing returned from ID...).... it looks kind of sad.
> 
> ID extension is pretty much worthless for version identification.  It is trivially spoofed -- and some servers do exactly this in the real world.  All it takes is one server/version to be spoofed to make that data worthless.
> 
> It's possible to do some level of basic version sniffing by things like banner messages, Human-readable responses, CAPABILITY lists, and ordering of responses to various commands.  However, this is really only useful for broad statistical surveys and not precise version determination.

Here are some interesting results based on such survey: http://openemailsurvey.org/dovecot-versions.png



More information about the dovecot mailing list