> From: [EMAIL PROTECTED] >> I just love the highly informative error message from Gmail's IMAP >> server when it is down: "System Error (Failure)". > I think it's actually good that the user doesn't get too much of > information when the server fails. User can't do anything about it > anyway. And too much information could give an attacker more > information on how to attack the system better.
I find little reason to obfuscate an error condition except when there is security policy involved (e.g., an authentication error which does not disclose whether it is the userid or password that is invalid). If the server is down, it either should not accept connections at all, or it should give a message such as "System temporarily unavailable, try again later" or "Server internal failure, try again later" that clearly indicates that this is not something that the client or end user is expected to remediate. Ideally, this type of condition should not happen at all. > BTW. The same error seems to be happening when trying to access a > message that was expunged in another session The mere act of setting \Deleted causes the message to vanish in Gmail. > http://imapwiki.org/ImapTest/ServerStatus - GMail is at the bottom of > the list. Perhaps some day I should look into it why. I'd guess there > are a lot of things they could easily fix. I don't think that they care. _________________________________________________________________ Store, manage and share up to 5GB with Windows Live SkyDrive. http://skydrive.live.com/welcome.aspx?provision=1?ocid=TXT_TAGLM_WL_skydrive_102008_______________________________________________ Imap-uw mailing list [email protected] http://mailman2.u.washington.edu/mailman/listinfo/imap-uw
