[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Requesting comments on draft-melnikov-imap-postaddress-05.txt
Lisa Dusseault writes:
My personal opinion on POSTADDRESS at a higher level is that it's a
little dangerous either as metadata or as list extensions -- I think
Philip was the other one who pointed out that attackers could use it
to place emails directly in folders other than your Inbox.
POSTADDRESS isn't the guilty party there, + addresses are and servers
which deliver to any folder are. IIRC I raised that issue when I
reviewed rfc3598bis.
Arnt