On Wed, Apr 22, 2015 at 08:10:51PM +0100, Jeremy Harris wrote:
> On 22/04/15 18:02, Viktor Dukhovni wrote:
> > Are you doing anything about server certificate name checks? If
> > the next-hop domain is in UTF-8 form, the a-label form is what
> > needs to be compared against the DNS-ID in SAN extensions or the
> > CN-ID in the subject name if applicable.
>
> Fair point. I need to add that.
Not trying to give you a hard time by the way, just conveying a
couple of issues dealt with as part of the the recent Postfix EAI
implementation... There are many opportunities for subtle
interactions, I would treat this as work-in-progress and continue
to think hard about remaining issues.
Does Exim send MIME bounces? What is the "charset" of bounce bodies
when interpolating UTF-8 addresses into error messages in the bounce
body? What is the content-type of the bounce message when returning
attached original messages that contain UTF-8 headers? ...
Lots of other stuff to think about.
--
Viktor.
