Injection-Date and Injection-Info in nnrpd
Julien ÉLIE
julien at trigofacile.com
Sun Dec 6 00:40:17 UTC 2009
Hi Heiko,
>> * The Injection-Date: header can be set by a posting agent. If not
>> set, it is always added with POST (not IHAVE).
>
> Why not insert this header using IHAVE of nnrpd? This is injection too,
> just using a different command and should be handled like POST. Of course,
> it should not be added by IHAVE of innd.
RFC 3977:
[IHAVE] differs from the POST command in that it is intended
for use in transferring already-posted articles between hosts. It
SHOULD NOT be used when the client is a personal news-reading
program, since use of this command indicates that the article has
already been posted at another site and is simply being forwarded
from another host.
Besides, IHAVE in nnrpd already behaves like this. For instance,
a post without a message-ID will be rejected by nnrpd when using IHAVE.
It is the same for a post without a Path: header.
>> If set but wrong, the article is rejected before its injection.
>
> Hmm. Some people use always midnight for Date: header for privacy reasons
> (e.g. they are posting during working hours). Injection-Date: will disclose
> the exact date and should be made configurable for privacy reasons.
When I say "wrong", I mean that it is an invalid date (something that
cannot be parsed as a date). So I believe the issue you report will
not occur.
>> * Go on rejecting articles whose Date: header is too far in
>> the past, even though Injection-Date: is fine.
>
> This is already implemented in innd and should not be changed.
In fact, my remark was more because of that paragraph in RFC 5537:
It SHOULD reject any article whose
Injection-Date header field is too far in the past (older than
the cutoff interval of a relaying agent that the injecting agent
is using, for example). It SHOULD similarly reject any article
whose Date header field is too far in the past, since not all
news servers support Injection-Date and only the injecting agent
can provide a useful error message to the posting agent.
We still follow the second SHOULD. Note that it partly defeats what
Injection-Date is for, because I can write an article the 4th and
send it the 24th. My Injection-Date is the 24th, which is the real
date of the article, according to RFC 5537:
(In the following discussion, the
"date" of an article is defined to be the date represented by its
Injection-Date header field, if present; otherwise, by its Date
header field.)
--
Julien ÉLIE
« C'est comme chercher une aiguille dans du foin en bottes ! »
(Jolitorax)
More information about the inn-workers
mailing list