From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id YEFSOZdmEWUuMgEAauVa8A:P1 (envelope-from ) for ; Mon, 25 Sep 2023 12:53:12 +0200 Received: from aspmx1.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id YEFSOZdmEWUuMgEAauVa8A (envelope-from ) for ; Mon, 25 Sep 2023 12:53:12 +0200 Received: from mail.notmuchmail.org (yantan.tethera.net [135.181.149.255]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8C2343C27A for ; Mon, 25 Sep 2023 12:53:11 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=iki.fi header.s=lahtoruutu header.b=G4YafFXj; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 135.181.149.255 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org; dmarc=none; arc=reject ("signature check failed: fail, {[1] = sig:iki.fi:reject}") ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1695639191; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references:list-id:list-help: list-owner:list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=4o5y8US0NslUvyzYd9jb1kLBr1VmGMwh/oi8tleh3H0=; b=bGoaODMo0eITrPbLHdz1STR0gi4rRkHcziU9B9O2X08mF2E6jhAsUjugiCKWnF7rEy/XI6 GTfUNzW+G0q+RFopCX2pWneHttBb0FLOQdl+cK6wwmm63ltIc9A5zq0KSe3806BqdpfHs0 l14IjsQ3SwHhkmyiaghqeyH9P2IGpc0gMJP8RJS+f1DziaiSFpKaQLaCScRY+WCZufzAPD CD8o7LCAPer0xpL8SjNLMnURcwTCzb2wkeP3Z3YtOhM8tU2WgDKaSO4oeW7Fxw6qWRDKhm Ay2qbmZN80F0ckrBA6ejUSAnLam5H7TxFK6QwsvDQzgomABDzqYx32HhJWIJKw== ARC-Authentication-Results: i=2; aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=iki.fi header.s=lahtoruutu header.b=G4YafFXj; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 135.181.149.255 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org; dmarc=none; arc=reject ("signature check failed: fail, {[1] = sig:iki.fi:reject}") ARC-Seal: i=2; s=key1; d=yhetil.org; t=1695639191; a=rsa-sha256; cv=fail; b=QeJ2rm8y3ATD8zawk8/Qdca+5BmfGBkVfSMZfXL+8bARhJ7iUb85CjpArIs89uocF1H7wW pjw0+s55OFErhFrHMpHCXL6awNrNWtQxMQm008ZCNokWLELX4MEYPUPZY5dx+v3TGbbyNL FngZBW9E6nnrybJ19dYe/8FK9UcgoRCuxBde9+oNu2II4hot3X10nYTbWc0wtMd6rc/Ohd lkakt/d5gcRclRkLa+VQEg0xH+M4fE4/kDRVIQxXUav14+VMiWTBL27nne9nFKP433VOTQ 76UmT/9h0VLjOX7Mz0kjH7jZCSDb37p3WY8lNL/B7+5AnYb+c8gqAvrkUL9jlQ== Received: from yantan.tethera.net (localhost [127.0.0.1]) by mail.notmuchmail.org (Postfix) with ESMTP id D9FA960A44; Mon, 25 Sep 2023 10:53:02 +0000 (UTC) X-Greylist: delayed 7124 seconds by postgrey-1.36 at yantan; Mon, 25 Sep 2023 10:53:01 UTC Received: from lahtoruutu.iki.fi (lahtoruutu.iki.fi [IPv6:2a0b:5c81:1c1::37]) by mail.notmuchmail.org (Postfix) with ESMTPS id 81D1460A38 for ; Mon, 25 Sep 2023 10:53:01 +0000 (UTC) Received: from mithlond (mobile-access-2e8440-108.dhcp.inet.fi [46.132.64.108]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: tlikonen) by lahtoruutu.iki.fi (Postfix) with ESMTPSA id 4RvKTl4f8bz49Q6R for ; Mon, 25 Sep 2023 13:52:59 +0300 (EEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iki.fi; s=lahtoruutu; t=1695639180; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=mJQxqECPZtLL3yWPufUWuLJWhqGb4XEOnjEfhJgVRRE=; b=G4YafFXjV6uF2Zxak4r9mrkTlf9DVhVUklX/vwa5YmCdq70TbJ8o/ZbuaCq/z9gF+R1XWz aS5CgQ1mQ0d+4NyWwSoygBu6Pqs++AtJQvpZBsGTIWlKE9NorxJyLte8+dKuVb5Sg6llYw prJfnrY7hQ36jHrzhua3jiJ2LPJJURC2Lfz9ngAez9z1KxuPwMXyAOuUmYT2CCOtDe4Pyy JY4lnw9CxDEILHP5Le4zf56edHPVU6DmSBpHTMRljhYrWkev7LTrjKduMGygT3aGn1WtbO KHQOW+1eDVFyuL79Uo2PL9OY5B5kRgRMto7vT9EMhEuZ/UXIWS2DmraS+lDdHg== ARC-Seal: i=1; s=lahtoruutu; d=iki.fi; t=1695639180; a=rsa-sha256; cv=none; b=pNJQu3fqK9oZFuBpelrcdn7FUVGv4p1ydBoKSuvBenrfYNZ5lUYebdKP6hgVHp4EO9rvvh 4cyLlkAib/thTU5XghqHAy9H1ab4HgHju9RIzISfMwEAEcO/Lu6B73CL+VHD3Alk4XVJt5 KJVHYXL2KYN3MeBqaTvnqH6k9JdbrD2DaBA6jWpiRYOGRyrfH6mjmwZXzn8w06wu9hhuJr P+8tWbkA4fL3UuqDxNymEH2f4HGPuJUcbv41Vj9PckYVDCq8BgFg+iE+IFh4ptqo08ZQ/3 yp3jvGJ0yQJFXl8uXM8Ds+8CJ0kF3wLInyGusEUmuTKVZl69WBXy8U7iD7UA3A== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=tlikonen smtp.mailfrom=tlikonen@iki.fi ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=iki.fi; s=lahtoruutu; t=1695639180; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=mJQxqECPZtLL3yWPufUWuLJWhqGb4XEOnjEfhJgVRRE=; b=ZFCplGKGWmcwPYlJdATVeFUdPoCX/ScTxKTzrgLMdgKdVlnoZ7ZMeRAvSrUc/+2rpOJeH7 MlmZmDXiRVwUOsC1GMT/PHSGrDAEQLdBR+1bsI9aaZvmivMDS+WN8F/ui1xk9agiMp6J+v j1cXVcnP6SNCSZtMS0juUuzkKMJjMhWBIgFJo6CqMccnt2RyBIJ+fC3mHJ5Gu89HQ1sdAp B1vDY7PCx1QLkXvO1zZLlA9oiSZvsBM/dakfu8X9rq19RncuTAacqd0bJRI7R8PCsrsM5h YXP5ZNy9Xa4X4SElpqui8MqqXoxNLz46OvtRxO52gzouTtXmGfz+8+uP25WXYQ== From: Teemu Likonen To: notmuch@notmuchmail.org Subject: Re: Fixed Message-ID trouble In-Reply-To: <874jjiskeo.fsf@iki.fi> References: <874jjiskeo.fsf@iki.fi> User-Agent: Notmuch/0.38 (https://notmuchmail.org) Emacs/29.1.50 (x86_64-pc-linux-gnu) Date: Mon, 25 Sep 2023 13:52:52 +0300 Message-ID: <871qemsewr.fsf@iki.fi> MIME-Version: 1.0 Message-ID-Hash: EXV4TPZMJMRLX4PMVFMAL7V35SBP4DZR X-Message-ID-Hash: EXV4TPZMJMRLX4PMVFMAL7V35SBP4DZR X-MailFrom: tlikonen@iki.fi X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-notmuch.notmuchmail.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.3 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: multipart/mixed; boundary="===============8716842535220676406==" X-Migadu-Flow: FLOW_IN X-Migadu-Country: DE X-Migadu-Spam-Score: -1.04 X-Migadu-Scanner: mx2.migadu.com X-Migadu-Queue-Id: 8C2343C27A X-Spam-Score: -1.04 X-TUID: mB2b2Chj0rEi --===============8716842535220676406== Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable * 2023-09-25 11:54:07+0300, Teemu Likonen wrote: > Some person on debian-user mailing list seems to be sending messages > with fixed Message-ID field: the same ID in different messages. In > Notmuch it is creating trouble because it connects unrelated threads to > one. The person has different messages in different threads but Notmuch > thinks they are the same message because the Message-ID is the same. > > This is potentially a "denial of service" for Notmuch. Well, not quite, > but is harmful nonetheless. How would a Notmuch user fix the mess or > protect himself against it? I am no longer sure if this issue is caused by fixed "Message-ID" or wrong "References" or "In-Reply-To" values. Anyway, someone has created real mess anyway because Notmuch combines originally separate threads now and forever. =2D-=20 /// Teemu Likonen - .-.. https://www.iki.fi/tlikonen/ // OpenPGP: 6965F03973F0D4CA22B9410F0F2CAE0E07608462 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIYEARYIAC4WIQQL23klfGMkeOvdGCt57xklfWtWWwUCZRFmhBAcdGxpa29uZW5A aWtpLmZpAAoJEHnvGSV9a1ZbykQA/21p0YJFRAaGGJPjucczjYSrnqwewwPqUXS5 eTWbRzygAP9om0uieqaxNjzflRZcYdIpAPOdyFDizF/1duxojcm5AA== =Yvs4 -----END PGP SIGNATURE----- --=-=-=-- --===============8716842535220676406== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============8716842535220676406==--