[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Requesting comments on draft-melnikov-imap-postaddress-05.txt




Lisa Dusseault writes:
My personal opinion on POSTADDRESS at a higher level is that it's a little dangerous either as metadata or as list extensions -- I think Philip was the other one who pointed out that attackers could use it to place emails directly in folders other than your Inbox.

POSTADDRESS isn't the guilty party there, + addresses are and servers which deliver to any folder are. IIRC I raised that issue when I reviewed rfc3598bis.

Arnt