about header address parsing
TACHIBANA Masashi
tachibana at qualitia.co.jp
Wed Sep 2 07:44:36 EEST 2020
Hi,
Thank you for your reply.
--
Tachibana
----- Original Message -----
> On Tue, 1 Sep, 2020 at 09:59, Timo Sirainen <timo at sirainen.com> wrote:
> > On 1. Sep 2020, at 6.24, TACHIBANA Masashi <tachibana at qualitia.co.jp>
> > wrote:
> >>
> >> Hi,
> >>
> >> Is this expected or not?
> >>
> >> From: user1 at fuga.example.com <user1 at example.com>
> >> To: user2 at hoge.example.com <user2 at example.com>
> >> ↓
> >> a uid fetch 43055 (envelope)
> >> * 1860 FETCH (UID 43055 ENVELOPE ("Thu, 30 Jul 2020 13:52:59 +0900"
> >> "test1" ((NIL NIL "user1" "fuga.example.com")) ((NIL NIL "user1"
> >> "fuga.example.com")) ((NIL NIL "user1" "fuga.example.com")) ((NIL
> >> NIL "user2" "hoge.example.com")) NIL NIL NIL
> >> "<WLXvFmpAZFNeQbPPITjRwimDyamnBm1 at test>"))
> >
> > This is an invalid email address, so it's neither correct nor
> > incorrect to have this output. But this reminded me that I was going
> > to discuss about this with other IETF people. Lets see what others
> > think:
> > https://mailarchive.ietf.org/arch/msg/extra/sqRTdsV_DGBhHu2ghdCDFo_pM8Q/
>
> While it is an invalid email address, in the exact same vein as
> <https://dovecot.org/pipermail/dovecot/2020-August/119658.html>
> Dovecot's approach is unhelpful here, and means MUAs must download
> complete headers rather than reply on envelope address structures. In
> fact, unlike in the linked case this example this is actually a
> security vulnerability: http://mailspolit.com/
>
> As a MUA maintainer, I'd really like to see Dovecot take a more
> proactive approach to sending useful values in envelope address
> structure, so we don't have to download headers all the time.
>
>
> >> From: "user1 at fuga.example.com" <user1 at example.com>
> >> To: "user2 at hoge.example.com" <user2 at example.com>
> >> ↓
> >> a uid fetch 43056 (envelope)
> >> * 1861 FETCH (UID 43056 ENVELOPE ("Thu, 30 Jul 2020 13:53:59 +0900"
> >> "test1" (("user1 at fuga.example.com" NIL "user1" "example.com"))
> >> (("user1 at fuga.example.com" NIL "user1" "example.com"))
> >> (("user1 at fuga.example.com" NIL "user1" "example.com"))
> >> (("user2 at hoge.example.com" NIL "user2" "example.com")) NIL NIL NIL
> >> "<WLXvFmpAZFNeQbPPITjRwimDyamnBm2 at test>"))
> >
> > This is a valid email address, and ENVELOPE reply is correct.
>
> Agreed.
>
> //Mike
>
> --
> Michael Gratton.
> <https://mjog.vee.net>
>
>
>
--
TACHIBANA Masashi QUALITIA CO., LTD.
mailto:tachibana at qualitia.co.jp
株式会社クオリティア
https://www.qualitia.co.jp/
More information about the dovecot
mailing list