Broken email header handling by LP (here, causes strange barfmail)

Brad Bollenbach brad.bollenbach at gmail.com
Fri Jan 20 15:29:15 GMT 2006


Forwarding from iwj, so that we don't lose track of this problem on  
launchpad-users at . This may later be split into several reports.

  affects /products/malone

On 19-Jan-06, at 8:54 AM, Ian Jackson wrote:

See the attached message, which is clearly due to some bogosity.
I think that part of the problem is likely to be that Launchpad has
forged an email apparently from me to Barry Warsaw.

Below you will find the headers of my original mail in my FCC, the
mangled copy I got back from LP.

Problems with LP's email headers include:
  * LP failed to use Resent-*; instead it randomly permuted the
    originator and recipient headers (From, To, Reply-To, etc).
  * LP rewrote the charset to utf-8 unnecessarily, and encoded the
    message in quoted-unprintable, also unnecessarily.
  * LP deleted all of the Receved fields.
  * LP stripped out X-Mailer (so I assume it must strip out
    all other headers it does not understand).
  * LP has even changed the Date field !

This is wholly at variance with sane practice for handling email.

Ian.

Before:

  From ian Thu Jan 19 13:34:48 +0000 2006
  X-VM-v5-Data: ([nil nil nil nil nil nil nil nil nil]
	 [nil "Thursday" "19" "January" "2006" "13:34:48" "+0000" "Ian  
Jackson" "ian at davenant.greenend.org.uk" nil nil "Re: [Bug 28903]  
OpenPGP key import fingerprint field lack of error 	reporting"  
"^From:" nil nil "1" nil nil (number "      19 January  Ian  
Jackson          Re: [Bug 28903] OpenPGP key import fingerprint field  
lack of error 	reporting\n") nil nil nil nil nil]
	 nil)
  MIME-Version: 1.0
  Content-Type: text/plain; charset=us-ascii
  Content-Transfer-Encoding: 7bit
  Message-ID:  
<17359.38264.363461.371206 at davenant.relativity.greenend.org.uk>
  In-Reply-To: <20060119125139.28395.1396.malone at gangotri.ubuntu.com>
  References: <20060118161036.28395.56448.malonedeb at gangotri.ubuntu.com>
	 <20060119125139.28395.1396.malone at gangotri.ubuntu.com>
  X-Mailer: VM 7.03 under Emacs 19.34.1
  From: Ian Jackson <ian at davenant.greenend.org.uk>
  To: Bug 28903 <28903 at bugs.launchpad.net>
  Subject: Re: [Bug 28903] OpenPGP key import fingerprint field lack  
of error
	 reporting
  Date: Thu, 19 Jan 2006 13:34:48 +0000

After:

  From VM Thu Jan 19 13:37:52 2006
  X-VM-v5-Data: ([nil nil nil nil nil nil nil nil nil]
	 [nil "Thursday" "19" "January" "2006" "13:36:06" "-0000" "Ian  
Jackson" "iwj at ubuntu.com" nil nil "[Bug 28903] OpenPGP key import  
fingerprint field lack of error 	reporting" "^From:" nil nil "1" nil  
nil (number "      19 January  Ian Jackson          [Bug 28903]  
OpenPGP key import fingerprint field lack of error 	reporting\n") nil  
nil nil nil nil]
	 nil)
  Received: from (chiark.greenend.org.uk) [172.31.80.8] (mail)
	 by davenant.greenend.org.uk with esmtp (Exim 3.35 #1)
	 id 1EzZxX-00019Q-00 (Debian); Thu, 19 Jan 2006 13:36:16 +0000
  Received: from fiordland.ubuntu.com ([82.211.81.145])
	 by chiark.greenend.org.uk (Debian Exim 3.35 #1) with esmtp
	 (return-path bounces at canonical.com)
	 id 1EzZxW-0007x5-00
	 for [*** deleted - iwj ***]@chiark.greenend.org.uk; Thu, 19 Jan  
2006 13:36:14 +0000
  Received: from fiordland.ubuntu.com ([82.211.81.145])
	   by chiark.greenend.org.uk (SAUCE v0.8.1)
	   with esmtp id sauce-7095-1137677-1; 19 Jan 2006 13:36:14 +0000 (GMT)
  Received: from adelie.ubuntu.com (adelie.ubuntu.com [82.211.81.139])
	 by fiordland.ubuntu.com (Postfix) with ESMTP id A8AC3B68015
	 for <iwj at ubuntu.com>; Thu, 19 Jan 2006 13:36:06 +0000 (GMT)
  Received: from gangotri.ubuntu.com ([82.211.81.179])
	 by adelie.ubuntu.com with esmtp (Exim 4.52 #1 (Debian))
	 id 1EzZxO-0000PR-Kq
	 for <iwj at ubuntu.com>; Thu, 19 Jan 2006 13:36:06 +0000
  Received: from gangotri.ubuntu.com (localhost.localdomain [127.0.0.1])
	 by gangotri.ubuntu.com (Postfix) with ESMTP id 95155318303
	 for <iwj at ubuntu.com>; Thu, 19 Jan 2006 13:36:06 +0000 (GMT)
  Content-Type: text/plain; charset="utf8"
  MIME-Version: 1.0
  Content-Transfer-Encoding: quoted-printable
  X-Launchpad-Bug: product=launchpad; status=Unconfirmed; priority=None;
	 assignee=None;
  Reply-To: Bug 28903 <28903 at bugs.launchpad.net>
  Message-Id:  
<17359.38264.363461.371206 at davenant.relativity.greenend.org.uk>
  References: <20060118161036.28395.56448.malonedeb at gangotri.ubuntu.com>
	 <20060119125139.28395.1396.malone at gangotri.ubuntu.com>
  Errors-To: bounces at canonical.com
  X-Generated-By: Launchpad (canonical.com)
  X-UIDL: G5:!![36"!RYO!!O\]!!
  From: Ian Jackson <iwj at ubuntu.com>
  Sender: bounces at canonical.com
  To: iwj at ubuntu.com
  Subject: [Bug 28903] OpenPGP key import fingerprint field lack of  
error
	 reporting
  Date: Thu, 19 Jan 2006 13:36:06 -0000


From: Barry Warsaw <noreply at wooz.org>
Date: January 19, 2006 8:36:18 AM EST (CA)
To: iwj at ubuntu.com
Subject: Re: [Bug 28903] OpenPGP key import fingerprint field lack of  
error reporting


This is an automated response.  I have received your message, but
unfortunately I get so much email that I can't promise a personal  
response.
Hopefully the information contained in this reply will be helpful.

For more information about the GNU Mailman mailing list system,  
please see:

     http://www.list.org

IMPORTANT: If you are being spammed by some site using Mailman, please
understand that there is nothing I can do for you.  I have no  
affiliation with
and no control over sites that use (or abuse) Mailman.  I do not  
spam, nor do
I condone spam, or the use of Mailman by spammers.  Spamming is  
reprehensible.

If the origin of the unwanted email is python.org, then please contact
postmaster at python.org, providing as much detail as possible.  If the  
origin of
the unwanted email is some other domain or site, you MUST contact  
that site
for relief.  I would love to be able to help you, but I can't.  I've  
probably
never even heard of the spamming site before, and I certainly have no
affiliation with, connection to, knowledge of, or access to any spamming
site.  Sorry.

If you have some complaint about a message in the python.org  
archives, please
send your message to postmaster at python.org, providing as much detail as
possible.

If you need more help or have a specific question about Mailman, you  
will have
better luck using these resources:

     http://www.list.org/help.html

I'm sorry, but I do not provide contracted Mailman installation or  
support
services.  Try asking for help on the mailman-users mailing list,  
which is
linked off the above page.

For help with Python related issues, please see:

     http://www.python.org/Help.html

If you think you got a virus or spam from barry at python.org, I promise  
you, I
did not send it.  My machines are not infected.  The virus or spam  
message
you got had a forged From field, and did not come from me.  I have no  
idea
who the forger was, and there's nothing I can do about it.

Barry Warsaw

Revision: $Rev: 6025 $
Last Modified: Thu, 19 Jan 2006 13:36:06 -0000: 2005-10-03 08:28:48  
-0400 (Mon, 03 Oct 2005) $

From: Ian Jackson <iwj at ubuntu.com>
Date: January 19, 2006 8:36:06 AM EST (CA)
To: barry at python.org
Subject: [Bug 28903] OpenPGP key import fingerprint field lack of  
error reporting
Reply-To: Bug 28903 <28903 at bugs.launchpad.net>


Public bug report changed:
https://launchpad.net/malone/bugs/28903

Comment:
James Henstridge writes ("[Bug 28903] OpenPGP key import fingerprint  
field lack of error 	reporting"):
> This is a duplicate of bug 4746.  The actual cause here is that we  
> don't
> currently accept old v3 RSA PGP keys.

There are two bugs here:
  1. v3 RSA PGP keys don't work (mine is actually a v2 key but
     that's not important right now).
  2. There is no proper error reporting.

Ian.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/launchpad-users/attachments/20060120/43b6f77c/PGP.pgp


More information about the launchpad-users mailing list