From owner-cvs-all Wed Nov 28 7:40:34 2001 Delivered-To: cvs-all@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id BD0BC37B423; Wed, 28 Nov 2001 07:40:14 -0800 (PST) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.11.6/8.11.5) with SMTP id fASFe2i38710; Wed, 28 Nov 2001 10:40:02 -0500 (EST) (envelope-from robert@fledge.watson.org) Date: Wed, 28 Nov 2001 10:40:01 -0500 (EST) From: Robert Watson X-Sender: robert@fledge.watson.org To: Maxim Sobolev Cc: "Jacques A. Vidrine" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: projects/mfcns/handler MFCns_handler.py In-Reply-To: <3C021794.5E2937EE@FreeBSD.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, 26 Nov 2001, Maxim Sobolev wrote: > > The following characters are all valid for the local part of an email > > address: [a-zA-Z0-9!#$%&'*+/=?^_`{|}~.-]. See RFC 822 (or 2822). > > In general I agree, but the "correct" solution would take some time to > implement, while it was necessary to close potential vulnerability ASAP. > Therefore, I decided to go that way, especially considering that so far > we do not have any committers with "funny" characters in their handles. That as may be, but I use mailing addresses with '+'s on a daily basis, and would appreciate it if, when you have the chance, you could use the RFC definition. Obviously, as you point out, no current committer addresses on freefall have this problem, but there is something to be said for resolving problems before they happen :-). I lost about two weeks worth of faxes when j2.net decided to upgrade their mail handler, and silently dropped all messages to addresses with +'s in them. Took me several more weeks to convience them that the RFC definition of correct addresses was the right one to use: they kept claiming that no one used addresses of that form, and that they were invalid. The incorrectness of both points should have been easy to pursuade them of. Robert N M Watson FreeBSD Core Team, TrustedBSD Project robert@fledge.watson.org NAI Labs, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message