Re: Notification authentication in CPIM

[email protected] (John D. Ramsdell)
Newsgroups gmane.ietf.impp
Message-ID <[email protected]> 
"Adrian Bateman" <[email protected]> writes:

> :o) Sorry to be such a pain.

You're not being a pain.  It's all part of the process.

I just noticed that without more constraints on the embedding of PIDF
into CPIM-MSGFMT, we leave ourselves open to covert channels.  We
really have to forbid the use of 'Subject' headers, and probably 'NS',
'Require', and 'cc' headers.

John



  [reminder: [email protected] for non-technical discussions, please]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.