Hi,

In that case is there

A) any way to declare that all flags will be permanent, i.e. the server
will set any flag on any message
B) any sensible limit to the number or size of flags, or should the
server just stop using them when the limits reached.

I ask this because I can imagine a scenario where a user has a client
that is maybe buggy and keeps setting flags say \test1, \test2 ......
\test50

Then the user upgrades to a better client which doesn't understand all
these flags. Without killing the users mailbox and the meta data there
is no way to remove these flags. If there is an arbitrary limit in the
server as to the number of flags then the new client will break as it
cant set its own flags.

It might even be possible to cause a DOS attack on some servers by
running a loop

For n=1 to infinity
        STORE +FLAGS (\MYFLAGn)


Has this been considered and if so what is the consensus on handling it.

Regards

Richard Bang
Floosietek Ltd
[EMAIL PROTECTED]
http://www.floosietek.com


> -----Original Message-----
> From: Mark Crispin [mailto:[EMAIL PROTECTED]
> Sent: 04 December 2003 16:56
> To: Richard Bang
> Cc: [EMAIL PROTECTED]
> Subject: Re: PERMANENTFLAGS
>
>
> On Thu, 4 Dec 2003, Richard Bang wrote:
> > I have a question regarding PERMANTFLAGS that I cant
> resolve from the
> > RFC (or I just couldn't find it).
> > Should the PF response include any flags that have been
> defined by the
> > client.
>
> Yes.  If you offer \* as one of the PERMANENTFLAGS, that
> means that you
> offer the facility of allowing the client to create keywords
> (flags which
> do not begin with "\").  Any such created keywords must appear in a
> subsequent SELECT in the FLAGS and PERMANENTFLAGS responses.
>
> This is per-mailbox.  Typically, each mailbox has a metadata
> area in which
> such things as UIDVALIDITY, UIDNEXT, and list of created keywords are
> maintained.
>
> If you do not wish to offer this facility, then do not
> include \* in the
> PERMANENTFLAGS.
>
> -- Mark --
>
http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.



Reply via email to