Skip to main content

Last Call Review of draft-ietf-extra-imap-messagelimit-08
review-ietf-extra-imap-messagelimit-08-secdir-lc-moriarty-2024-05-31-00

Request Review of draft-ietf-extra-imap-messagelimit
Requested revision No specific revision (document currently at 10)
Type IETF Last Call Review
Team Security Area Directorate (secdir)
Deadline 2024-03-25
Requested 2024-03-04
Authors Alexey Melnikov , ArunPrakash Achuthan , Vikram Nagulakonda , Luis Alves
I-D last updated 2025-03-03 (Latest revision 2024-07-29)
Completed reviews Artart IETF Last Call review of -08 by Barry Leiba (diff)
Opsdir IETF Last Call review of -08 by Joel Jaeggli (diff)
Genart IETF Last Call review of -08 by Russ Housley (diff)
Secdir IETF Last Call review of -08 by Kathleen Moriarty (diff)
Artart Telechat review of -10 by Barry Leiba
Assignment Reviewer Kathleen Moriarty
State Completed
Request IETF Last Call review on draft-ietf-extra-imap-messagelimit by Security Area Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/secdir/mg4rR2NbM3Wq9O06J3rCiE40_sQ
Reviewed revision 08 (document currently at 10)
Result Ready
Completed 2024-05-31
review-ietf-extra-imap-messagelimit-08-secdir-lc-moriarty-2024-05-31-00
The extension restricts the number of messages that can be processed with a
command. The security considerations section notes that new bugs could
potentially be introduced, and that quality assurance testing will be used to
mitigate that possibility.

Restrictions or setting limits typically helps to prevent security problems
such as buffer overruns, so the extension could be helpful from a security
persective preventing DoS attacks or other exploits of the server or server
resources.

If the team would like to add something to that effect into the security
considerations, it is reasonable.