Forrest Aldrich <[EMAIL PROTECTED]> writes:

> I asked about the issue with Sendmail and Environment Variables, and
> this is the response I received.
>
> Seems we could come up with a mailer definition to the sendmail.cf
> file to pass the necessary infomation in the form of command-line
> arguments.

This seems only slightly more convenient than using procmail or
maildrop as the local delivery agent as described in the
documentation.  The advantage of environment variables is that users
can use software like TMDA without having the admin change the
Sendmail configuration.

> Passing data in environment variables is a dirty way of transferring
> information, and can be potential source of security problems.
> Passing envelope information on the command line to the mailer, as
> done by sendmail, is cleaner and more secure.

*chuckle* Take a look at Sendmail's track record for security, and
then ask yourself whether the above answer makes sense.  Using
environment variables hasn't caused any problems for qmail, Exim, or
Postfix in many years of use.

In short, this explanation is as Tim said, ``hogwash''.  They just
don't want to do the work.  I'd have much more respect for the
Sendmail crew if they just admitted that their architecture isn't
flexible enough to accommodate such an addition instead of providing a
fallacious answer like this.

---Jason (wondering when Sendmail will finally die)
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to