[Bug 67516] Support content type message/partial (RFC 2046) reassembling messages

Bernd Oliver Sünderhauf pancho.mz at riseup.net
Wed Dec 5 16:44:17 GMT 2012


https://bugs.kde.org/show_bug.cgi?id=67516

Bernd Oliver Sünderhauf <pancho.mz at riseup.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDSINFO                   |RESOLVED
         Resolution|WAITINGFORINFO              |WONTFIX
            Summary|KMail does not seem to      |Support content type
                   |suppost the RFC 2046        |message/partial (RFC 2046)
                   |standard for content type:  |reassembling messages
                   |message/partial. (at least  |
                   |partial messages I receive  |
                   |are not reassembled)        |

--- Comment #7 from Bernd Oliver Sünderhauf <pancho.mz at riseup.net> ---
Yes, I remember and found some evidence that they are still produced by recent
Outlook versions. However, these days they seem to be mostly used for
obfuscating malware, because split up attachments can't be checked by antivirus
software.

The security problems are so large that even Exchange Server 2007 blocks them,
as well as Qmail and probably more mail servers and antivirus software.
Finally, US-CERT explicitely warns from automatically reassembling the partial
messages (https://www.kb.cert.org/vuls/id/836088) and proposes rejecting
partial messages.

So if some really stable code with secure logics and a foolproof UI existed, we
might want to think about it.
But it doesn't, and the demand has been ceasing, so I think it's really not
worth the hassle.
Therefore I'm marking this WONTFIX.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Kdepim-bugs mailing list