I wonder how many vulnerabilities have been accidentally created by adherence to postel's law rather than just being strict in what's accepted too. It has been in the making for at least ten years, the problem for me has been that that production environments and test environment