• injecting cancel control messages in moderated groups

    From Marco Moock@21:1/5 to All on Sat Mar 15 05:45:08 2025
    Hello!
    https://www.rfc-editor.org/rfc/rfc5537#section-5.3
    indicates that cancels can be used to cancel messages in a moderated
    group.


    Cancel control messages listing moderated newsgroups in their
    Newsgroups header field MUST contain an Approved header field like
    any other article in a moderated newsgroup. This means that cancels
    posted to a moderated newsgroup will normally be sent to the
    moderator first for approval. Outside of moderated newsgroups,
    cancel messages are not required to contain an Approved header field.

    How is the process here?
    When issuing a cancel message in a moderated group, should the NUA send
    it to the group itself without an approved header?

    PS: I currently file a bug report for Claws Mail as it includes an
    Approved: header in a cancel message - for unmoderated and moderated
    groups.

    --
    kind regards
    Marco

    Send spam to [email protected]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adam H. Kerman@21:1/5 to Marco Moock on Sat Mar 15 11:19:25 2025
    Marco Moock <[email protected]> wrote:

    Hello!
    https://www.rfc-editor.org/rfc/rfc5537#section-5.3
    indicates that cancels can be used to cancel messages in a moderated
    group.

    Cancel control messages listing moderated newsgroups in their
    Newsgroups header field MUST contain an Approved header field like
    any other article in a moderated newsgroup. This means that cancels
    posted to a moderated newsgroup will normally be sent to the
    moderator first for approval. Outside of moderated newsgroups,
    cancel messages are not required to contain an Approved header field.

    How is the process here?
    When issuing a cancel message in a moderated group, should the NUA send
    it to the group itself without an approved header?

    Let's think about this.

    In unmoderted Usenet, typically we think of three parties who might issue a cancel. A first-party cancel would be issued by the author. A second-party cancel would be issued by his News administrator. On sites that implement
    it, camcel-lock authenticates first and second party cancels.

    A third party cancel is issued by anybody else.

    In moderated Usenet, the author's proto article isn't a Usenet article. The author isn't the first party. The author has not posted to Usenet. There is only one party, the moderator. If we're assuming that the author's News
    site sends the cancel message to the moderator, then the proto cancel
    message cannot be self-approved by the author.

    PS: I currently file a bug report for Claws Mail as it includes an
    Approved: header in a cancel message - for unmoderated and moderated
    groups.

    Perhaps a self-approved proto cancel article for a moderated newsgroup
    should be rejected by the News site and not sent to the moderator, but
    I have no idea how News servers are programmed.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Julien_=C3=89LIE?=@21:1/5 to All on Sun Mar 16 10:57:31 2025
    Hi Marco,

    https://www.rfc-editor.org/rfc/rfc5537#section-5.3
    indicates that cancels can be used to cancel messages in a moderated
    group.


    Cancel control messages listing moderated newsgroups in their
    Newsgroups header field MUST contain an Approved header field like
    any other article in a moderated newsgroup. This means that cancels
    posted to a moderated newsgroup will normally be sent to the
    moderator first for approval. Outside of moderated newsgroups,
    cancel messages are not required to contain an Approved header field.

    How is the process here?
    When issuing a cancel message in a moderated group, should the NUA send
    it to the group itself without an approved header?

    The same process applies to the injection of articles in moderated
    newsgroups, either they have a Control header field (like cancels), a Supersedes header field, or none of these.

    Notably Section 3.5 of RFC 5537 about the duties of an injecting agent:

    7. If the Newsgroups header contains one or more moderated groups
    and the proto-article does not contain an Approved header field,
    the injecting agent MUST either forward it to a moderator as
    specified in Section 3.5.1 or, if that is not possible, reject
    it. This forwarding MUST be done after adding the Message-ID
    and Date headers if required, and before adding the Injection-
    Info and Injection-Date headers.

    And afterwards, Section 3.9 about the duties of a moderator.



    PS: I currently file a bug report for Claws Mail as it includes an
    Approved: header in a cancel message - for unmoderated and moderated
    groups.

    I agree the news reader should not add an Approved header field to
    cancels it sends.

    --
    Julien ÉLIE

    « A man who is not married is incomplete; a man who is married is
    finished. »

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adam H. Kerman@21:1/5 to Julien on Sun Mar 16 13:55:29 2025
    Julien <[email protected]d> wrote:

    https://www.rfc-editor.org/rfc/rfc5537#section-5.3
    indicates that cancels can be used to cancel messages in a moderated
    group.

    Cancel control messages listing moderated newsgroups in their
    Newsgroups header field MUST contain an Approved header field like
    any other article in a moderated newsgroup. This means that cancels
    posted to a moderated newsgroup will normally be sent to the
    moderator first for approval. Outside of moderated newsgroups,
    cancel messages are not required to contain an Approved header field.

    How is the process here?
    When issuing a cancel message in a moderated group, should the NUA send
    it to the group itself without an approved header?

    The same process applies to the injection of articles in moderated >newsgroups, either they have a Control header field (like cancels), a >Supersedes header field, or none of these.

    Notably Section 3.5 of RFC 5537 about the duties of an injecting agent:

    7. If the Newsgroups header contains one or more moderated groups
    and the proto-article does not contain an Approved header field,
    the injecting agent MUST either forward it to a moderator as
    specified in Section 3.5.1 or, if that is not possible, reject
    it. This forwarding MUST be done after adding the Message-ID
    and Date headers if required, and before adding the Injection-
    Info and Injection-Date headers.

    And afterwards, Section 3.9 about the duties of a moderator.

    PS: I currently file a bug report for Claws Mail as it includes an >>Approved: header in a cancel message - for unmoderated and moderated >>groups.

    I agree the news reader should not add an Approved header field to
    cancels it sends.

    If processing a self-approved Control message of an article posted to a moderated newsgroup is a matter of local policy, can you tell me why
    that was thought to be a good idea? I'm missing something here.

    Nobody was really thinking that third-party cancel messages in moderated newsgroups were going to be used as a spam coutermeasure, were they? Seems
    to me that if somebody was caught bypassing moderation to inject spam,
    then the News site would be de-peered.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)