MAIL in Strict mode doesn't support optional extensions about go-smtp

[foxcpp]

Problem is resolved in go-smtp. As of proton-bridge issue, I suggest you to raise issue in bridge repo to update used go-smtp version.

[foxcpp]

Does RFC 5321 specify how to handle unknown parameters? I do not see anything about it.

[foxcpp]

protonmail-bridge uses 2018 version of go-smtp via this fork: https://github.com/ProtonMail/go-smtp

I am unable to reproduce the issue this exact error message at latest master.

Here is the test case I am using:

func TestServerStrictESMTP(t *testing.T) {
	_, s, c, scanner := testServerAuthenticated(t)
	s.Strict = true
	defer s.Close()
	defer c.Close()

	io.WriteString(c, "MAIL FROM:<[email protected]> AUTH=test\r\n")
	scanner.Scan()
	if !strings.HasPrefix(scanner.Text(), "250 ") {
		t.Fatal("Invalid MAIL response:", scanner.Text())
	}

	return
}

[foxcpp]

Interesting, however, it causes a different error. "Unknown MAIL FROM argument". There is a test that checks for that error.

[foxcpp]

The proper solution is to recognize AUTH= parameter and pass it to backend.

[foxcpp]

https://tools.ietf.org/html/rfc4954

For this reason, servers that advertise support for this
extension MUST support the AUTH parameter to the MAIL FROM
command even when the client has not authenticated itself to the
server.

[smoores-dev]

Interesting, however, it causes a different error. "Unknown MAIL FROM argument". There is a test that checks for that error.

I'm also confused by this! Reading through the code, what you're describing is absolutely what I'd expect to see. For context, I was interacting with this library through the https://github.com/ProtonMail/proton-bridge application; I wonder if that is being bundled with an older version of this package that handled that responded with the other error message in this scenario? (Full disclosure, I don't know much about Go package management) But it definitely seems to be the AUTH= parameter that's causing this there; dropping it fixes the error message.

[foxcpp]

(Full disclosure, I don't know much about Go package management)

https://github.com/ProtonMail/proton-bridge/blob/8288a39ff427dccb3db66048240393084db2b23b/go.mod#L76

[smoores-dev]

Ah, I missed that first bit of your earlier comment, thanks

[smoores-dev]

Weirdly, looking through that fork, it seems like it shouldn't be responding with an error message at all! But maybe I ought to open an issue on that repo to at least pull in the latest from here (I guess.. after this AUTH= handling is merged)

[smoores-dev]

Will do! Thanks so much @foxcpp