From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Kangas Newsgroups: gmane.emacs.bugs Subject: bug#58472: [PATCH] Make `message-unique-id' less prone to collisions Date: Mon, 17 Oct 2022 09:30:22 +0000 Message-ID: References: <871qr794o2.fsf@rfc20.org> <83sfjm3lvu.fsf@gnu.org> <87lepehmzw.fsf@gnus.org> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="4549"; mail-complaints-to="usenet@ciao.gmane.io" Cc: matt@rfc20.org, Paul Eggert , 58472@debbugs.gnu.org To: Lars Ingebrigtsen , Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Mon Oct 17 11:34:38 2022 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1okMW6-0000vn-4v for geb-bug-gnu-emacs@m.gmane-mx.org; Mon, 17 Oct 2022 11:34:38 +0200 Original-Received: from localhost ([::1]:58218 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1okMW2-0005tW-FC for geb-bug-gnu-emacs@m.gmane-mx.org; Mon, 17 Oct 2022 05:34:36 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:45306) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1okMSd-0005i9-8n for bug-gnu-emacs@gnu.org; Mon, 17 Oct 2022 05:31:09 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:48278) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1okMSc-0003jC-PJ for bug-gnu-emacs@gnu.org; Mon, 17 Oct 2022 05:31:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1okMSc-0008CR-L8 for bug-gnu-emacs@gnu.org; Mon, 17 Oct 2022 05:31:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Kangas Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 17 Oct 2022 09:31:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 58472 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch Original-Received: via spool by 58472-submit@debbugs.gnu.org id=B58472.166599903131422 (code B ref 58472); Mon, 17 Oct 2022 09:31:02 +0000 Original-Received: (at 58472) by debbugs.gnu.org; 17 Oct 2022 09:30:31 +0000 Original-Received: from localhost ([127.0.0.1]:47345 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1okMS7-0008Ak-5C for submit@debbugs.gnu.org; Mon, 17 Oct 2022 05:30:31 -0400 Original-Received: from mail-oa1-f41.google.com ([209.85.160.41]:37604) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1okMS4-0008AO-SH for 58472@debbugs.gnu.org; Mon, 17 Oct 2022 05:30:29 -0400 Original-Received: by mail-oa1-f41.google.com with SMTP id 586e51a60fabf-12c8312131fso12624217fac.4 for <58472@debbugs.gnu.org>; Mon, 17 Oct 2022 02:30:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:mime-version:references:in-reply-to :from:from:to:cc:subject:date:message-id:reply-to; bh=Ql6teqf7GiV7oSe8sARmF3qhFD1s0L/ic3fxapa2JFw=; b=gKXsywzLtbcOdWNDU2QLkycQsXryzfBVM67OWZxjQSv1EigFTTd8QoQKLUxY3Sdn7g 6uvniRijb+bBJMRECZ5AHr58H7kM+XC/gk9mSyVxg75J6tZ3G5ikooSPU0ySZzYNglZs 4ZzDWRLkGsKSB0j2ltXH2UnvaxQzOJpyWZPo8Jnb33W4Dqu3wmxgUlktSxv/DOpa2UF7 Dg6lKS7y31ge2j7/O4KC+sbEQyC0ob1Cmwzpu11VtxDE6kCUPZdKjRmQ+J/6PJ819ABS 71U9L9RH+gGSlg1R1zp0lfd4IZXX3SlEaY2bpruGL1sWhlDqGtZwU1Iz851iivzZlVk1 5n7w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:mime-version:references:in-reply-to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Ql6teqf7GiV7oSe8sARmF3qhFD1s0L/ic3fxapa2JFw=; b=TpR1zvkgzQ+zg7XWHxzt04d6mQvtrGidZYqrjCI6GmwbzYO6u6MX6M4TFJfi6C2Hnw p81Btepv3B/2m47PuhWgr86g6o5TaIWZdpCsVoNOMoBBrWO3E8cFYw3SpaBhETtoY9os 4CihLxpx5BXG8kuPEYWMvzkI8/KZUWGj/dFCry8XCDKJ9wT3k5KxP51XCyXFSvkVtACY vBhMycGoJDUaEqB3Mx43g0ZjNZ042cK7itawZbHTusbswc0je+KwW6B3X6sqamBDP0SR YNOVjt9v1Z9/sZgT4xiaM4pLU3MNBLUyZFUBJ29rI79u9ndSgbPE6sMy2wLRX9g7mB2u aGYA== X-Gm-Message-State: ACrzQf3mJKuiNnzCihB6HFttYXXhA6567RcL5Aj42q+1l9JdImeJTIsE oKk1X0oWd+Cx29DE20qh9OKhacGvhy87COMHhkU= X-Google-Smtp-Source: AMsMyM5e3cxYHZ+UsVAX5oqS1gvohYDKP+FXVI40aHBipTrm7tyfSO6OSsDysSQBXe9AyzKrSJS+xgQqBAOIQIy4CL8= X-Received: by 2002:a05:6870:9126:b0:132:b724:e96c with SMTP id o38-20020a056870912600b00132b724e96cmr14901995oae.199.1665999023137; Mon, 17 Oct 2022 02:30:23 -0700 (PDT) Original-Received: from 753933720722 named unknown by gmailapi.google.com with HTTPREST; Mon, 17 Oct 2022 09:30:22 +0000 In-Reply-To: <87lepehmzw.fsf@gnus.org> X-Hashcash: 1:20:221017:58472@debbugs.gnu.org::UnH+cwzIxSwM+/mI:6JpQ X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:245707 Archived-At: Lars Ingebrigtsen writes: > And, like I've said before, there's a reason the Message-ID is on the > format it's on now -- it has information that allows users to do work on > it (so changing it will break some use cases), and it's short (which > makes it efficient in many algos), and it's obviously "good enough" -- > it's been this way for decades without any problems. It still has the privacy issues I've indicated. Leaking the euid for no good reason leaves you vulnerable to fingerprinting (or even attack, in the worst case scenario). I also don't think the kind of processing you propose on the Message-ID is useful, as most people end up with euid 1000 these days. You have other headers that are more suitable for that. > So I'd prefer not to change `message-make-id', If my most recent patch is not acceptable, could you agree with any of the earlier ones? We can make it as short as you want to, or even keep it at 10 characters. The important part is to not include the euid.