Discussion about Cancel-Lock support

Julien ÉLIE julien at trigofacile.com
Fri Jan 7 12:57:05 UTC 2022


Hi Russ,

>>     To best ensure that it will be relayed to the same news servers as
>>     the original message, a cancel control message SHOULD have the same
>>     Newsgroups header field as the message it is cancelling.
> 
>> So maybe the change to do is to only do the check in nnrpd (at injection
>> time) and not do it when relaying?
> 
> this is a client issue where, if the client doesn't follow
> that advice, the cancel may not work.  It's not a security issue, and it's
> not really a server issue.  Cancels issued to the wrong group don't cause
> any *harm*; if they're authenticated, they're still authenticated and thus
> legitimate, and if they're not authenticated, who knows.

OK, it's true that it's up to the posting agent to ensure it properly 
sets the Newsgroups header field.  No harm done if that's not the case.


> So, basically, I wouldn't bother.  I think it would just be extra
> complexity in INN to no real purpose.

Let's remove this parameter; we already have enough :-)
Contrary to syntax checks and other nits that could cause 
interoperability issues, this one is not necessary to verify at 
injection time by nnrpd, indeed.

-- 
Julien ÉLIE

« Boire du café empêche de dormir. Par contre, dormir empêche de boire
   du café. » (Philippe Geluck)


More information about the inn-workers mailing list