From: Charles Lindsey (chl@clerew.man.ac.uk)
Date: Thu Feb 12 2004 - 10:22:41 CST
In <87isiez6iy.fsf@windlord.stanford.edu> Russ Allbery <rra@stanford.edu> writes:
>> No, because there are a (very) few cases where double injection can
>> occur legitimately (usually where there has been some complex
>> gatewaying), and in these cases the Injection-Date will be already
>> present (and MUST NOT now be changed). But there is no way in general to
>> distinguish these few cases from that of the
>> malicious/stupid/incompetent poster.
>Then we don't and we make people who are doing complex gatewaying use some
>other mechanism of loop detection or bypass the normal posting software by
>using a special interface that allows preservation of Injection-Date
>(like, say, IHAVE).
No, we say that they MUST retain whatever Injection-Date header was put
there the first time it was injected. That was your original suggestion,
and indeed it stops all loops.
That might give some small leeway for the malicious poster to be more
malicious, but malicious posters are going to do awkward things whatever
we say :-( .
-- Charles H. Lindsey ---------At Home, doing my own thing------------------------ Tel: +44 161 436 6131 Fax: +44 161 436 6133 Web: http://www.cs.man.ac.uk/~chl Email: chl@clerew.man.ac.uk Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K. PGP: 2C15F1A9 Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5