There are lots of other things that may need to be done to handle
dealing with duplicated message-id's as well. Note that the RFC's
mandate that the message-id is unique per message.

A number of IMAP packages use the message-id as a way of keeping
track of the message in the various folders.
Having messages with the message-id breaks the standards, may
cause problems in message handling, etc.

The problem is bigger than just the anti-spam packages out there.

From the original message it was indicated that these many dups
might be picked up by the AV/AS software on the server. If it is,
the blocking of the message should happen before the message-id
gets entered into the users cache of delivered messages. Therefore
the 1st non-spam message should still be able to get through to the
end user.

-_Gene

Maciej Soltysiak made the following keystrokes:
>Hello Adrian,
>
>Thursday, February 17, 2005, 7:57:01 PM, you wrote:
>
>> It seems to be required that programs that automatically discard
>> duplicate messages have to use a checksum over the body and part of the
>> header of the emails instead of relying on the message ID.
>Very interesting indeed Adrian.
>So to sum it all up just for now, the advisories are two.
>One for users, one for developers of MUAs.
>
>Users: Beware of the fact that automatic discarding of duplicated messages
> may result in you not getting the original mail in case someone exploi
> ts
> the effect Adrian depicted.
>
>Developers: Consider using checksum of the email messages, not only the
> Message-ID to distinguish between duplicated messages.
>
>Am I correct?
>
>Fortunately I was never using this MUA feature - I just take care of the
>duppies manually, which is not a big chore for me I must say.
>
>
>--
>Best regards,
>Maciej Soltysiak
>
>
>

[ reply ]