On 29.10.2012, at 23.20, Christoph Anton Mitterer wrote:
> On Mon, 2012-10-29 at 23:13 +0200, Timo Sirainen wrote:
>>> Great... and I expect that this ("no headers from the maildir files
>> are
>>> interpreted") applies also, when one "imports" mails the first time.
>>>
>>> With import I don't mean via IMAP, but plainly moving e.g. a maildir
>> ++
>>> tree under dovecots mail location.
>>
>> Yeah.
> So that means: From a "security" point of view, when using maildir (!)
> there's no need to remove such headers, cause dovcote ignores them (on
> maildir) always. Right?!
Right. The only special case is X-UIDL: header, which is used for POP3 UIDLs
but only if pop3_reuse_xuidl=yes (which isn't really recommended nowadays as
there are other ways to do it).
> I just wondered because when I looked through my mail archive (currently
> as mentioned, under Evolution)... many emails already had X-UID and
> X-IMAP* headers.... (set by the remote side, not by Evolution) ... and
> in no case these should be able to mess around in my dovecot :)
If you migrated from mbox format it could have brought those headers to
maildir. They're anyway not used for anything by Dovecot.
