OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: 250-8BITMIME question

From: Wietse Venema (wietseporcupine.org)
Date: Wed Sep 19 2007 - 15:43:53 CDT


Victor Duchovni:
> On Wed, Sep 19, 2007 at 03:08:33PM -0400, Wietse Venema wrote:
>
> > > Is there anyone who feels they will benefit in practice (rather than in
> > > theory) from a feature that allows 7bit mail mislabeled as 8bit to go
> > > through unconverted?
> >
> > How would you solve the multi-hop problem?
>
> Presumably, this about mail is *actually* 8bit.

No, both real and mis-labeled.

> - If this my outbound gateway, and I am doing signing, I will
> down-convert first.

What works for Morgan Stanley is not necessarily an acceptable
solution for general deployment.

Postfix doesn't downgrade before signing. Sendmail doesn't downgrade
before signing. DKIM-milter does not replace the message body. And
as these two make up a significant portion of the mail server
market, a significant portion of 8bit mail will be signed as 8bit
mail.

If people experience signature breaking trouble then I will recommend
that they turn off MIME conversion in Postfix. I might even add
a CISCO PIX-like bug workaround for EXIM so that people don't have
to mess around with mime conversion settings.

I prefer not to implement proactive MIME downgrading in the Postfix
cleanup server.

        Wietse