10. Considerations de securite

10. Considerations de securite

Security considerations for $istrusted and $muted appear in Sections 7.4, 9.1.8, and 9.1.14. $istrusted conveys trust to the user, so servers need to apply it only when the sender identity is truly verified. $muted can hide replies from the user; if an account is compromised, an attacker could mute threads to reduce visibility of their actions.

Use and interpretation of these keywords and mailbox name attributes depend on the client and user trusting the IMAP server. A compromised or malicious server could set or manipulate them to mislead users. For additional IMAP security considerations, refer to [RFC9051].