To be consistent with the names for the recently published RFC's, may we
include in the instructions to the RFC Editor to update the title to:
Sieve Email Filtering: Notify Extension
Aaron
On Tue, 2008-01-29 at 16:09 -0500, The IESG wrote:
The IESG has approved the following document:
- 'SIEVE Email Filtering: Extension for Notifications '
<draft-ietf-sieve-notify-12.txt> as a Proposed Standard
This document is the product of the Sieve Mail Filtering Language Working
Group.
The IESG contact persons are Lisa Dusseault and Chris Newman.
A URL of this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-sieve-notify-12.txt
Note to RFC Editor
Add the following paragraph to the end of the Security Considerations:
"It is imperative that whatever implementations use to store the
user-defined filtering scripts protect them from unauthorized
modification, to preserve the integrity of the mail system. An attacker
who can modify a script can cause mail to be discarded, rejected, or
forwarded to an unauthorized recipient. In addition it's possible that
Sieve scripts might expose private information, such as mailbox names, or
email addresses of favoured (or disfavoured) correspondents. Because of
that, scripts SHOULD also be protected from unauthorized retrieval."
SIEVE notify extension WG Chairs Write-up for IESG.
draft-ietf-sieve-notify-09 - Proposed Standard
(1.a) Shepherd: Cyrus Daboo <mailto:cyrus(_at_)daboo(_dot_)name> I have
personally reviewed this document and believe it ready for
submission to the IESG.
(1.b) It has had adequate review from WG members. Not from non-WG
members. No concerns with the nature of those reviews.
(1.c) No concerns about broader review.
(1.d) No IPR or other concerns with this document.
(1.e) There is strong WG consensus behind this document.
(1.f) No appeals or serious discontent.
(1.g) ID nits were checked. Whilst some warnings appear, the draft
in fact was correct.
(1.h) References are split into two sections. There is one normative
reference to the SIEVE base spec revision draft which has
already been submitted to the IESG. There is one informative
reference to the SIEVE variables extension draft that is in
the RFC Editor queue waiting on the revised base spec.
(1.i) IANA section verified.
(1.j) XML and ABNF validated.
(1.k) ...
Technical Summary
The SIEVE notify extension adds an action that allows users to trigger
a notification to be sent when an incoming message matches some criteria.
The "base" specification defines a framework on how this action can be
used with a URI to specify the notification method. Subsequent documents
will profile different URI schemes for use with the notify action.
The draft has a detailed description of how interactions with other
SIEVE extensions/actions are handled.
The security considerations section covers several identified security
concerns.
Working Group Summary
This document has been discussed and reviewed in the SIEVE Working Group.
There is strong consensus in the Working Group to publish this document
as a Proposed Standard.
Document Quality
Several implementers have indicated they will implement this extension.
Personal
Document Shepherd: Cyrus Daboo <mailto:cyrus(_at_)daboo(_dot_)name>
AD: Lisa Dusseault <mailto:lisa(_at_)osafoundation(_dot_)org>