11. 安全考虑事项

RFC 3501 IMAPv4 March 2003

本页目前包含 RFC 3501 末尾安全与参考文献相关内容的本地化摘录. IMAP4rev1 的安全性依赖多个外部规范, 包括 SASL 认证机制、TLS 传输保护、MIME 解析规则、国际化字符集处理以及消息格式规范. 下列引用中的英文标题、作者、RFC 编号和日期应保持原文, 以便与 RFC Editor 和 IANA 记录准确对应.

实现者在阅读这些参考文献时, 应特别关注认证凭据保护、明文连接升级、邮箱多客户端访问、服务器响应解析和国际化文本处理等问题. 这些主题会直接影响 IMAP 客户端和服务器在真实部署中的互操作性与安全边界.

附录

A. 规范性参考文献

以下文档包含正确理解本文档所必需的定义或规范: [ABNF] Crocker, D. and P. Overell, "Augmented BNF for Syntax Specifications: ABNF", RFC 2234, November 1997.

[ANONYMOUS] Newman, C., "Anonymous SASL Mechanism", RFC 2245, November 1997.

[CHARSET] Freed, N. and J. Postel, "IANA Character Set Registration Procedures", RFC 2978, October 2000.

[DIGEST-MD5] Leach, P. and C. Newman, "Using Digest Authentication as a SASL Mechanism", RFC 2831, May 2000.

[DISPOSITION] Troost, R., Dorner, S. and K. Moore, "Communicating Presentation Information in Internet Messages: The Content-Disposition Header", RFC 2183, August 1997.

[IMAP-TLS] Newman, C., "Using TLS with IMAP, POP3 and ACAP", RFC 2595, June 1999.

[KEYWORDS] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.

[LANGUAGE-TAGS] Alvestrand, H., "Tags for the Identification of Languages", BCP 47, RFC 3066, January 2001.

[LOCATION] Palme, J., Hopmann, A. and N. Shelness, "MIME Encapsulation of Aggregate Documents, such as HTML (MHTML)", RFC 2557, March 1999.

[MD5] Myers, J. and M. Rose, "The Content-MD5 Header Field", RFC 1864, October 1995.

RFC 3501 IMAPv4 March 2003

[MIME-HDRS] Moore, K., "MIME (Multipurpose Internet Mail Extensions) Part Three: Message Header Extensions for Non-ASCII Text", RFC 2047, November 1996.

[MIME-IMB] Freed, N. and N. Borenstein, "MIME (Multipurpose Internet Mail Extensions) Part One: Format of Internet Message Bodies", RFC 2045, November 1996.

[MIME-IMT] Freed, N. and N. Borenstein, "MIME (Multipurpose Internet Mail Extensions) Part Two: Media Types", RFC 2046, November 1996.

[RFC-2822] Resnick, P., "Internet Message Format", RFC 2822, April 2001.

[SASL] Myers, J., "Simple Authentication and Security Layer (SASL)", RFC 2222, October 1997.

[TLS] Dierks, T. and C. Allen, "The TLS Protocol Version 1.0", RFC 2246, January 1999.

[UTF-7] Goldsmith, D. and M. Davis, "UTF-7: A Mail-Safe Transformation Format of Unicode", RFC 2152, May 1997.

以下文档描述了实现本协议时应仔细考虑的实现质量问题:

[IMAP-IMPLEMENTATION] Leiba, B., "IMAP Implementation Recommendations", RFC 2683, September 1999.

[IMAP-MULTIACCESS] Gahrns, M., "IMAP4 Multi-Accessed Mailbox Practice", RFC 2180, July 1997.

A.1 资料性参考文献

以下文档描述相关协议:

[IMAP-DISC] Austein, R., "Synchronization Operations for Disconnected IMAP4 Clients", Work in Progress.

[IMAP-MODEL] Crispin, M., "Distributed Electronic Mail Models in IMAP4", RFC 1733, December 1994.

RFC 3501 IMAPv4 March 2003

[ACAP] Newman, C. and J. Myers, "ACAP -- Application Configuration Access Protocol", RFC 2244, November 1997.

[SMTP] Klensin, J., "Simple Mail Transfer Protocol", STD 10, RFC 2821, April 2001.

以下文档属于历史文档, 或描述本协议的历史方面:

[IMAP-COMPAT] Crispin, M., "IMAP4 Compatibility with IMAP2bis", RFC 2061, December 1996.

[IMAP-HISTORICAL] Crispin, M., "IMAP4 Compatibility with IMAP2