[NNTP] Extension snapshots 2

Ken Murchison ken at oceana.com
Thu Jan 6 12:02:04 PST 2005


Clive D.W. Feather wrote:

> Russ Allbery said:
> 
>>>And perhaps we dance around this issue a little and say something like
>>>this in the base doc:
>>
>>>"If a client intends to use the MODE READER command, it SHOULD issue
>>>this command before any security or privacy commands are issued."
>>
>>I don't see any reason to leave it that mild.  I would say:
>>
>>    If a client intends to use the MODE READER command, it SHOULD issue it
>>    before issuing any commands other than CAPABILITIES and MUST issue it
>>    before any security or privacy commands are issued.
> 
> 
> What I've put in snapshot 6 is:
> 
>    A client MAY use the CAPABILITIES command to determine whether it
>    needs to issue a MODE READER command and SHOULD NOT do so if it is
>    unnecessary.  If the server does not support CAPABILITIES (and
>    therefore does not conform to this specification), the client MAY use
>    the following heuristic:
>    o  if the client wishes to use the IHAVE command, it SHOULD NOT use
>       the MODE READER command or any command that is not marked as 
>       mandatory in this specification;
>    o  otherwise the client SHOULD use the MODE READER command
>       immediately after the initial connection, and then SHOULD NOT use
>       the IHAVE command.
> 
> and, elsewhere:
> 
>    The client MUST NOT send this command
>    after any other command except CAPABILITIES (in particular, it MUST
>    NOT send this command twice in a session); if it does so, the server
>    MAY violate this specification even if it returns a successful
>    response (for example, the server MAY forget the currently selected
>    newsgroup or change its privacy or authentication status).
> 
> How's that?

I thought the sentence that Russ came up with pretty much says all that 
needs to be said.  I'm not sure what else your more verbose text adds to 
this, unless I'm missing something.  In fact, it seems somewhat 
confusing (I had to read it a few times).

Don't we also want text somewhere that states that "the MODE-READER 
capability MUST NOT be advertised after any security or privacy commands 
have completed successfully"?

-- 
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp



More information about the ietf-nntp mailing list