OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: 250-8BITMIME question

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Wed Sep 19 2007 - 14:44:24 CDT


On Wed, Sep 19, 2007 at 03:08:33PM -0400, Wietse Venema wrote:

> > Is there anyone who feels they will benefit in practice (rather than in
> > theory) from a feature that allows 7bit mail mislabeled as 8bit to go
> > through unconverted?
>
> How would you solve the multi-hop problem?

Presumably, this about mail is *actually* 8bit.

    - If this my outbound gateway, and I am doing signing, I will
    down-convert first.

    - On inbound gateways I will verify first, add authentication
    result headers that internal systems will trust and make signature
    downstream moot.

    - If I am an outsourced MX provider, I downgrade as necessary (but
    only as necessary if we add the 8bit detection feature) and if
    the downstream customer can't verify signatures, they know what to
    upgrade, or can trust my authentication result headers.

    - If I am outsourced outbound relay (ISP, ...) I offer 8bit support,
    downgrade when necessary (possibly only when necessary), and people
    who sign 8bit without pre-converting get unpredictable results.

    - I am a list-manager or other re-submission service, I verify the
    original signature, record the result in a header I sign, then add
    my own signature. I am generating new mail, so it ought to be signed,
    by the list. The original signature may survive intact, but this is
    not essential.

Did I miss any important use cases?

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.