[NNTP] draft-ietf-nntpext-tls-nntp-02.txt

[Jeffrey M. Vinocur]

On Sep 30, 2004, at 2:12 PM, Russ Allbery wrote:

> Jeffrey M Vinocur <jeff at litech.org> writes:
>
>> I was basing this on the fact that INN's nnrpd does close the 
>> connection
>> on a failed AUTHINFO USER/PASS, which is a vaguely parallel case.
>
> Ah, okay.  I'm not sure that INN is correct to do that either.

I never found that behavior elegant, but I can certainly see why server 
authors might choose it.

Hmm.  I mean, if no one else thinks is a problem, I'm not about to fall 
on my sword over it.

(Perhaps we could add a caution to client authors in the Generic 
Responses section of the base spec, warning not to DOS the server by 
rapidly retrying many times after receiving a 400 response?)


-- 
Jeffrey M. Vinocur
jeff at litech.org