[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: AD review of draft-ietf-sieve-3028bis-12
On Fri, Mar 30, 2007 at 10:15:39PM +0100, Alexey Melnikov wrote:
>
> >Section 10
> >
> >> Implementations SHOULD take measures to prevent scripts from looping.
> >
> >Q: Isn't this trivially true because Sieve scripts have no loop
> >command? Perhaps you meant to say "creating mail loops" instead of
> >"looping".
>
> Actually, there is separate text about mail loops:
>
> The "redirect" command has considerations regarding loop prevention;
> see the command description for recommendations.
>
> I can't remember now why this text is here. Maybe it is just alerting
> about buggy implementations that might loop due to buffer overflows, etc.?
I had submitted the following comment for -09:
> 10. Security Considerations
> Implementations SHOULD take measures to prevent languages from
> looping.
I think it means "messages" not "languages"
"languages" was changed to "scripts" which seems no better. I dunno,
maybe the original intent was "scripts" but I still don't see why that
would be there. The reminder about message loops seems appropriate to me
for this section.
A couple of the other changes look familiar too :)
mm