Re: Hantering av felaktig hash

Linus Nordberg linus@nordberg.se writes:

Assumption:

• We move XHASHCASHCHALLENGE/RESPONSE and XHASHCASHAUTH to after MAIL FROM but before RCPT.

Will the following statements hold?

• The receiving MTA will

  • be able to report failure due to missing hash cash and authentication, in the response to RCPT.

Yes.

• be able to report failure due to erroneous hash cash payments, in the response to RCPT.

Probably. Unless we make the challenge salt depend on the message contents or something like that.

• have to wait until the response to DATA (and the message, ended with <CRLF>.<CRLF>) to report failures due to erroneous authentication.

Yes.

/Niels