Re: [art] [FEEDBACK REQUEST] "Birds of a Feather" topic, email security threats

[Stephen Farrell <[e-mail]>]

Hiya,

On 03/02/2020 21:06, Michael Peddemors wrote:
> "Birds of a Feather (BOF)" on email authentication security.

I'd love to see improvements in IMAP for countering
password guessing attacks from random sources. I'm
not sure how well 2FA schemes are supported in IMAP
myself but I think something like that would be good
if widely and easily deployed. TBH though, I'm very
unsure how likely it would be that such improvements
would get deployed in major clients, servers and
services but it'd be good if they were. (I was at a
meeting recently where IMAP was described by a small
mail operator as a "legacy protocol" when compared to
a proprietary one from their fav. vendor that does
support 2FA;-()

I'm also not clear that sending more long-lived
identifiers about is at all the right approach (in
particular not MAC addresses and the like!). So
even if the problem is a good BoF topic, I dunno if
the approach in draft-yu is what I'd like to see
happen. (That's based on a v. quick scan of only
that draft, sorry if I've gotten the wrong end of
the stick!)

Anyway FWIW, I'd go along to a bar BoF or formal
BoF on this topic.

Cheers,
S.