From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id yKD3NQBdFGWIrQAAG6o9tA:P1 (envelope-from ) for ; Wed, 27 Sep 2023 18:49:05 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id yKD3NQBdFGWIrQAAG6o9tA (envelope-from ) for ; Wed, 27 Sep 2023 18:49:04 +0200 Received: from mail.notmuchmail.org (yantan.tethera.net [IPv6:2a01:4f9:c011:7a79::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 5E2303ED93 for ; Wed, 27 Sep 2023 18:49:04 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 2a01:4f9:c011:7a79::1 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1695833344; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-owner:list-unsubscribe:list-subscribe:list-post; bh=hcBIKLgwLjkE01Ogb6Y9EVgMo+GdltVP1VUmwAMhu/0=; b=TwSfcm7UX2f2DLNp8qXA6UjbHZ9OPnKmPG+40E/eXqr3dK5lN8IabG+I4e51UqMTM1dhDJ ADa7Fce4XTJhK1YCx6vnWg86lQoqoyIAbos3NdLqEkfhlfSv+DTq6U46ngkSCKjnOJDSEk umdnXX6nwjQ9hsBoE2Np6TKswDtsG6xRgOm8p3jrSsyB5D3O+EzvLVo3EMeSTKF1yKOePW oNNx4Q53ojZsINSjX8d6pqqGf001ULct1ptEcfEXXkbY6wiIYcfLZa7/SAJI4fHayRF6Il byd/aCnuURlp9EPfSeTlK2HKQ7n3zKQmtEor9HOt3TUepJuQr6WN43oPHZ78rw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1695833344; a=rsa-sha256; cv=none; b=N8FREUF7L1UU9y/GOvoNtWRfrmobihIW7qNT7JzE1h/XW1yBGZodA0tARigpzdw5T4olxD WKj5LTZ1vho3QvEbBvi2lYeu2o8W8CcORuhbH0a1exU/lmN/Mj9+OCpOeQuameUiz0PEix AhsQhT1rcGmsR99Dp/tVSY9GURG49I+Db7oESikh/Z95qR37/fBEPTES3kGkvBnwlMlbHu wJZ1TfqIagLJ/MSA8TlGZEp2pAqLpu0LRwWNaxYRPDeee7/Bj3dhJ441/A/LMxCxGoJuCA tXk6/bKLvBn+oG7WPR9vnDZyJwGtBX0pZIteNh1zzFatmUBBF8ROFhklozZ7xA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 2a01:4f9:c011:7a79::1 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org; dmarc=none Received: from yantan.tethera.net (localhost [127.0.0.1]) by mail.notmuchmail.org (Postfix) with ESMTP id 7321260A71; Wed, 27 Sep 2023 16:48:56 +0000 (UTC) Received: from phubs.tethera.net (phubs.tethera.net [192.99.9.157]) by mail.notmuchmail.org (Postfix) with ESMTPS id 3CBA760A6D for ; Wed, 27 Sep 2023 16:48:53 +0000 (UTC) Received: from tethera.net (fctnnbsc51w-159-2-210-253.dhcp-dynamic.fibreop.nb.bellaliant.net [159.2.210.253]) by phubs.tethera.net (Postfix) with ESMTPS id 7736A180066; Wed, 27 Sep 2023 13:48:51 -0300 (ADT) Received: (nullmailer pid 1797003 invoked by uid 1000); Wed, 27 Sep 2023 16:48:50 -0000 From: David Bremner To: Teemu Likonen , notmuch@notmuchmail.org Subject: Re: Fixed Message-ID trouble In-Reply-To: <874jjiskeo.fsf@iki.fi> References: <874jjiskeo.fsf@iki.fi> Date: Wed, 27 Sep 2023 13:48:50 -0300 Message-ID: <87v8bvpnnx.fsf@tethera.net> MIME-Version: 1.0 Message-ID-Hash: 3RDFJCBKVYPC72SLZLSQIEMM65EBWQTS X-Message-ID-Hash: 3RDFJCBKVYPC72SLZLSQIEMM65EBWQTS X-MailFrom: david@tethera.net X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-notmuch.notmuchmail.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.3 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Migadu-Country: DE X-Migadu-Flow: FLOW_IN X-Spam-Score: -0.80 X-Migadu-Spam-Score: -0.80 X-Migadu-Scanner: mx1.migadu.com X-Migadu-Queue-Id: 5E2303ED93 X-TUID: 6k0GVZbqBpYn Teemu Likonen writes: > Some person on debian-user mailing list seems to be sending messages > with fixed Message-ID field: the same ID in different messages. In > Notmuch it is creating trouble because it connects unrelated threads to > one. The person has different messages in different threads but Notmuch > thinks they are the same message because the Message-ID is the same. > > This is potentially a "denial of service" for Notmuch. Well, not quite, > but is harmful nonetheless. How would a Notmuch user fix the mess or > protect himself against it? By the way, if using the emacs front-end did you try the unthreaded view (U)? That would at least mitigate damage from people replying to the poisoned messages. I could imagine a future version of notmuch considering the identification of files with the same message id as part of "threading", and allowing an unthreaded view to just show all the files, effectively ignoring the message-id. The next step would be to do that selectively for some messages. This all requires a complete redesign of the database schema, so I don't know how realistic it is. d