Re: Upcoming new test-suite release

"Frank Ellermann" <[email protected]> Sun, 9 Dec 2007 02:31:43 +0100
Newsgroups gmane.mail.spam.spf.devel,gmane.mail.spam.spf.discuss
Organization <http://purl.net/xyzzy>
Message-ID <[email protected]>
Julian Mehnle wrote:

> The "a:<64chars>.bar" case seems way more fundamental than 
> "a:%{macro-that-expands-to-64+chars}.bar", yet you seem to
> think that testing only the latter is sufficient.

IMO test both, it's in the spirit of Stuart's proposal to
cover all plausible code paths in a buggy implementation.

> I have thought long about how a PermError (let alone 
> TempError) could be justified for those cases, but I 
> couldn't find a reasonable rationale, so I took the 
> liberty of narrowing it down to "no-match".

Does that agree with your proposal of a new erratum wrt
"Permerror after macro expansion" ?  I haven't checked
this yet (later: now I did, see below).

> do we really need an erratum (currently noted as 
> <http://www.openspf.org/RFC_4408/Errata#permerror-invalid-domains>) 
> codifying the "no-match" behavior, or can we just drop
> the draft erratum entry?

That wannabe-erratum doesn't propose a fix, I guess what
I meant is "whatever you do, this is no TempError", or
"better let's say what it is" (no match or PermError).

But you found something about a PermError in the spec.,
http://permalink.gmane.org/gmane.mail.spam.spf.devel/1804
about http://www.openspf.org/RFC_4408#op-result-permerror
(= http://tools.ietf.org/html/rfc4408#section-2.5.7 )

What's a "checked identity having an unexpected format",
and where's Wayne when I want to kick his [guess]... ;-)

Have all syntatically valid identities expected formats ?
"good..dots"@example is syntactically valid, but simple
good..dots.example queries won't work for %{l}.example,
while good\.\.dots.example should work.

OTOH bad..dots.example is a syntactically invalid HELO,
does 2.5.7 mean that a:%{h} should throw a PermError ?

Likewise bad..dots@example is syntactically invalid,
implementations MUST NOT try to fix it for a possible
bad\.\.dots.example query.    

We could say 2.5.7 got it wrong, and it should be "no
match", not PermError.  Or we could remove the wannabe-
erratum keeping 2.5.7 and its obscure PermError as is.

In both cases I think that interpreting dots within a
quoted string (LHS) as "embedded dots" makes sense, it
is almost the same as "back\\slash"@example or other
odd creatures you might find in a local part for %{l}.

No erratum for the latter, but some ugly new test cases
where it would be a surprise if SPF implementations got
it right... :-(  2822upd will be somewhat simpler, no
more NO-WS-CTL.  But still quoted dots and backslashes.

 Frank

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/1007/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/1007/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=6959932&id_secret=74004709-fddca4
Powered by Listbox: http://www.listbox.com