MBOX-Line: From MRC at CAC.Washington.EDU  Tue Apr  4 14:15:01 2006
To: imap-protocol@u.washington.edu
From: Mark Crispin <MRC@CAC.Washington.EDU>
Date: Fri Jun  8 12:34:37 2018
Subject: [Imap-protocol] authentication condition reporting extensions
Message-ID: <Pine.WNT.4.65.0604041404240.4136@Tomobiki-Cho.CAC.Washington.EDU>

The question has come up about possible extensions to what may optionally 
be reported by the server due to authentication conditions.  Obviously, 
there is substantial security sensitivity here.

The conditions in question are:
  . password will expire at such-and-such future time (or interval)
  . password has expired
  . account will expire at such-and-such future time (or interval)
  . account has expired
  . account has been disabled

It is desired to include a URL that will provide more information.

Currently, the only way to do this is with ALERT, but perhaps it would be 
useful if the client could know about some of these.

Example (with both ALERT for compatibility and new response code)

* NO [EXPIRED http://imap.example.com/expired]
tag NO [ALERT] Your account has expired, contact the help desk

Comments?

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.

