From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from localhost (localhost [127.0.0.1]) by olra.theworths.org (Postfix) with ESMTP id 9F346431FBC for ; Sat, 10 Mar 2012 09:38:51 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at olra.theworths.org X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none] autolearn=disabled Received: from olra.theworths.org ([127.0.0.1]) by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 42aqK2OBOFPI for ; Sat, 10 Mar 2012 09:38:51 -0800 (PST) Received: from socrates.hocat.ca (socrates.hocat.ca [76.10.188.53]) by olra.theworths.org (Postfix) with ESMTP id 07D3E431FAE for ; Sat, 10 Mar 2012 09:38:51 -0800 (PST) Received: from hermes.hocat.ca (hermes.hocat.ca [69.165.170.253]) by socrates.hocat.ca (Postfix) with SMTP id 5060D1AE3; Sat, 10 Mar 2012 10:38:47 -0700 (MST) Received: (nullmailer pid 14148 invoked by uid 1000); Sat, 10 Mar 2012 17:38:45 -0000 From: Tom Prince To: Jeremy Nickurak , notmuch Subject: Re: a DoS vulnerability associated with conflated Message-IDs? In-Reply-To: References: <87k42vrqve.fsf@pip.fifthhorseman.net> <87ipif2fdn.fsf@wyzanski.jamesvasile.com> <4F58E962.1050403@fifthhorseman.net> User-Agent: Notmuch/0.11.1+239~g4d2d96b (http://notmuchmail.org) Emacs/23.4.2 (x86_64-pc-linux-gnu) Date: Sat, 10 Mar 2012 12:38:44 -0500 Message-ID: <87y5r84aqj.fsf@hermes.hocat.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-BeenThere: notmuch@notmuchmail.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Mar 2012 17:38:51 -0000 On Thu, 8 Mar 2012 10:38:32 -0700, Jeremy Nickurak wrote: > On Thu, Mar 8, 2012 at 10:16, Daniel Kahn Gillmor wrote: > > Any other suggestions or ideas? > > What about representing the contents from both message in one apparent message? > - ... > - If the bodies disagree, display both. We'd probably need to do some like doing a diff. I find it annoying enough displaying both text and html copies of a mail. Displaying two copies of a message, just because one of them has a few extra lines as a footer would be equally annoying. Maybe it would be enough to ignore the signature too, when comparing messages?