home *** CD-ROM | disk | FTP | other *** search
- On Fri, 02 Jul 93 09:43:19 BST, A.Grant@ucs.cam.ac.uk wrote:
- > On the contrary, sending through IMAP could have a great benefit if the
- > IMAP server is co-located with the client (or to be precise, if the IMAP
- > server is not located significantly further away than the nearest available
- > SMTP server), in that it would not require the sender's authenticity to be
- > established for each submitted message.
-
- Access authentication is not the same thing as posting authentication. Note
- that IMAP already has an anonymous access mode.
-
- To get authenticated e-mail, you need authenticated data (e.g. PEM) and/or
- authenticated transport. Shoehorning transport into an access protocol such
- as IMAP, or the use of kludges like RFC-931, are band-aids that at best give
- the illusion of solving the problem. It is not the right solution to the
- problem of forged e-mail.
-
- There is also a performance problem, even on a local network. It ties up the
- IMAP stream while message delivery is going on. Sometimes it takes several
- minutes, particularly with dialup IP links, for the message to be delivered
- over the network. Shoehorning delivery into IMAP precludes background
- delivery of mail.
-
- > > If the IMAP
- > > server is remote (or in a foreign country), sending through IMAP is
- > > potentially a horribly slow (and expensive!) operation.
- > So? Nobody would be forced to use it.
-
- I can guarantee that most MUA implementors will implement only one way of
- sending mail. Whatever way is the ``encouraged way'' will become the forced
- way. The POP world has discovered this, with clients that use optional
- extentions and don't work with the reference implementations.
-
- > Anyway, if I was in a foreign
- > country for a long time I would be just as likely to want to get my home
- > IMAP server to forward my messages automatically to an IMAP server closer
- > to me.
-
- I am a frequent traveller, and I object to having to forward my mail every
- time I am out of the country for a week. Why should I, when I have this
- wonderful IMAP that is carefully designed to work well over slow links?
-
- Why shouldn't I keep my mail on a foreign IMAP server on that IMAP server if I
- want. Perhaps that data is there because it is primarily useful there, and
- not all forwarded to my local machine.
-
- Why should my IMAP mail reading be blocked while a message I just composed is
- being sent overseas, when I could drop it off at a local SMTP server in the
- background?
-
- The whole point is, with access and delivery functionality separate, the user
- has the choice. With them shoehorned into the same protocol, there is no
- choice.
-
- I agree that it sounds nice and easy, but it's only suitable in the most
- simple cases and has many possible bad side effects that can not be prevented
- easily.
-
- Why not lobby in the IETF-SMTP group to have authenticated transport? That
- is, after all, what you really want; the credentials required to access mail
- are not necessarily the same as the credentials to post mail.
-
- > And I would want a
- > "submit from message store" function so that I could say "Fred, I'm out
- > of the country - please could you deal with the attached 100MB piece of
- > video mail".
-
- MIME provides a mechanism of doing this now, with the external reference
- functionality.
-
-
-
-