Re: Use of message disposition notification

In <[email protected]> Russ Allbery <[email protected]> writes:

>Julien ÉLIE <[email protected]> writes:

>>    It SHOULD reject any proto-article which contains a header field
>>    deprecated for Netnews (see, for example, [RFC3798] (Hansen, T. and
>>    G. Vaudreuil, "Message Disposition Notification," May 2004.)).
>>
>> Is it really here that RFC 3798 is to be referenced?  (And not USEFOR or
>> another RFC?)  If yes, could it be better explained?

>It's an example of a header that's deprecated for Netnews, in this case
>precisely because it doesn't make any sense in Netnews.  The RFC says
>somewhere in it that it's deprecated or not allowed in Netnews (I forget
>where).

RFC 3798 end of section 2.1:

   Messages posted to newsgroups SHOULD NOT have a Disposition-
   Notification-To header.

The reason is that it could be used to send mail bombs. I suppose we could
mention that reason in our Security Considerations.

-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131            Web: http://www.cs.man.ac.uk/~chl
Email: [email protected]      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5