Re: Message delimiting security issues

On Wed, Jan 17, 2007 at 08:42:40AM -0800, Travis Snoozy wrote:
> On Wed, Jan 17, 2007 at 11:47:33AM +0100, Henrik Nordstrom wrote:
> <snip>
> > Does the implied LWS rule apply to header names, even if it's not
> > allowed in MIME? Allowing LWS around the header name does not make
> > sense, but it is not explicitly forbidden.
> 
> LWS is not allowed.
>

... if you summarily dismiss the "implied LWS rule." Yes, LWS is allowed between
tokens and separators. My mistake; I'm used to BNF explicitly specifying exactly
what can and cannot happen, and not making implicit back-references.

LWS SHOULD NOT be allowed.

-- 
Travis