On Tue, Mar 11, 2003 at 06:35:00PM -0500, Sam Varshavchik wrote: > File a bug report with Microsoft. As you've noted, normally illegal 8-bit > content gets rejected. Now, it is acceptable, but an IMAP client is > explicitly notified that the 8bit content uses an unknown character set.
Sam, I have a suggestion. Instead of erroring stating that Courier won't accept broken MIME messages, rephrase it into something long the lines of: This message contains content that is typically used by viruses to infect remote systems. As such it is rejected. Changes the entire issue. Now ISP's using Courier can state it's a *feature* - hell, they could charge more for it :-) As the author of Qmail-Scanner, a content-scanner for Qmail, I'm firmly in Sam's camp when it comes to "be strict in what you produce, STRICT IN WHAT YOU ACCEPT". There are too many bugs (primarily with Outlook BTW) that happen because of the casual manner in which MUAs parse MIME. These inconsistancies lead to exploits. This has to end. The only way to do this is to TIGHTEN up what is classified as acceptable - not to loosen it. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This SF.net email is sponsored by:Crypto Challenge is now open! Get cracking and register here for some mind boggling fun and the chance of winning an Apple iPod: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
