Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 9 Sep 2002 17:10:42 +0200
From: Peter van Dijk <>
Subject: Re: Maildir support

On Mon, Sep 09, 2002 at 10:01:00AM -0400, Cory Visi wrote:
> I am willing to do a patch for now. Maybe something you can audit when you
> have time.
> Can anyone recommend a particularly clean/secure implementation
> of Maildir-style mbox access? I looked at the Pine maildir.c and it's
> pretty sloppy. I figure reusing the code is a better approach than
> starting from scratch.

The pine maildir-implementation is severely broken. So is procmail's
implementation (and combine they in fact cause problems). Also note
that maildir.c is an unsupported add-on to Pine - the Pine developers
refuse to include Maildir support.

I have audited some maildir-implementations (regarding delivery, that
is). You can find the results at, which also explains some of
the details.

The qmail popper (qmail-pop3d, not qpopper) is a very good

If you have any questions, feel free to ask me (although I'm sure
you're welcome to do that on-list), and I'd be happy to audit your
implementation for compliance to the Maildir specification. 

Greetz, Peter
--  |  |  Undernet:#clue

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.