ietf-smtp
[Top] [All Lists]

Re: draft-klensin-rfc2821bis-04: VRFY and EXPN syntax

2007-07-15 12:43:09

SM wrote:
At 14:29 14-07-2007, Markus Stumpf wrote:
On Sat, Jun 16, 2007 at 10:05:20AM +0300, Kari Hurtta wrote:
> 4.1.1.6.  VERIFY (VRFY)
> 4.1.1.7.  EXPAND (EXPN)

Does anybody know about any MTA actively using these today?
Is there any secenario (besides address harvesting) within which these
are still useful in todays email communication?
VRFY is still useful for address verification. It is disabled in the default configuration of some MTAs due to abuse.
In our MTA VRFY/EXPN are disabled by default. They can be enabled unconditionally or require SMTP AUTH.
IMHO most MTAs support the commands but respond something like:
    252 send some mail, i'll try my best

Why not simply drop them completely?
[...]
Note that the draft-04 mentions that "Server implementations" should support both VRFY and EXPN and leaves it to local installations to disable them if need be. By dropping them, we are removing functionality that is useful for debugging.
Agreed.