Check Newsgroups header of cancel messages

[rra]

Reported by eagle on 14 Dec 2008 07:34 UTC
A patch from Christopher Biedl to alter ARTcancelverify to check whether at least one group in the cancel message can be found in article to be canceled.

• verifycancel-newsgroups.patch.txt

[rra]

Comment by iulius on 14 Dec 2008 19:21 UTC
Maybe this feature should be added to the check already done on Sender: and From: headers. (This patch currently removes that check.)

[rra]

Comment by iulius on 14 Aug 2009 19:00 UTC
According to RFC 5537 (USEPRO):

Contrary to RFC 1036 (Horton, M. and R. Adams, Standard for interchange of USENET messages, December 1987.), cancel control messages are not required to contain From and Sender header fields matching the target message. This requirement only encouraged cancel issuers to conceal their identity and provided no security.

The check done on Sender: and From: headers can therefore be removed.

[rra]

Comment by iulius on 14 Aug 2009 19:45 UTC
(In [8564]) A patch from Christopher Biedl to alter ARTcancelverify
to check whether at least one group in the cancel message
can be found in the article to be cancelled.

The check for matching Sender: and From: headers is useless
and removed.

close #52