MBOX-Line: From tss at iki.fi  Fri Nov 24 01:26:50 2006
To: imap-protocol@u.washington.edu
From: Timo Sirainen <tss@iki.fi>
Date: Fri Jun  8 12:34:38 2018
Subject: [Imap-protocol] RFC 3501 section 5.4 Autologout timer
In-Reply-To: <alpine.WNT.0.8.0611231637020.4980@Shimo-Tomobiki.panda.com>
References: <OFA9534B24.F7AFC6BC-ON8825722F.0072265E-8825722F.0073EC06@ca.i bm.com>
	<alpine.OSX.0.7.0611231345060.17689@pangtzu.panda.com>
	<20061123140532.C1467@gollum.dev.gmi-mr.com>
	<alpine.WNT.0.8.0611231637020.4980@Shimo-Tomobiki.panda.com>
Message-ID: <1164360410.8783.383.camel@hurina>

On Thu, 2006-11-23 at 16:48 -0800, Mark Crispin wrote:
> On Thu, 23 Nov 2006, Lyndon Nerenberg wrote:
> > So, if you do change the errata, please mandate a minimum 5 minute timer 
> > in pre-authenticated state so that we can retain some robustness in the 
> > protocol
> 
> Sadly, just about every attempt to legislate against stupidity in protocol 
> specifications have been miserable failures...  :-(
> 
> Isn't 5 minutes excessive?  Nobody has ever complained about UW imapd's 3 
> minute timer.

Dovecot has 1 minute and no-one's ever complained about that either. But
I hadn't thought too much about that value, I guess I'll increase it to
3 minutes as well.

I think most people use clients which save the password so this isn't an
issue for more than a couple of people, and those are probably fast
enough typers anyway since they're willing to write their password every
time.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: This is a digitally signed message part
URL: <http://mailman13.u.washington.edu/pipermail/imap-protocol/attachments/20061124/f518c284/attachment.sig>
