IETF Logo Mail Archive

[Emailcore] Re: [Last-Call] draft-ietf-emailcore-as-28 ietf last call Secdir review

Rob Sayre <sayrer@gmail.com> Fri, 08 May 2026 17:03 UTC

Return-Path: <sayrer@gmail.com>
X-Original-To: emailcore@mail2.ietf.org
Delivered-To: emailcore@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A67FAEB51CC1 for <emailcore@mail2.ietf.org>; Fri, 8 May 2026 10:03:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1778259801; bh=XuiG0fYDy6UZ18P3eEhm2NHNOg1v0kH4wu6zni4N/yg=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=WiVa/oiUj1o7Wk6cYGBZNInysMinzlGz+pmb3cfvQBzDqoYs7zAtFiulOFlCDAnQ1 TpzQ++dVmnC/fLtV/yl6dWqi7fy7PVcpsW+u2y5ehIqE6PWyBXzMR9rfzAIPasf68i nXgAkAS19Co5zVc7fHmQ7J08kcT8XEQqDbTDJsqs=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ku-4GQ8S_F7i for <emailcore@mail2.ietf.org>; Fri, 8 May 2026 10:03:17 -0700 (PDT)
Received: from mail-pl1-x62a.google.com (mail-pl1-x62a.google.com [IPv6:2607:f8b0:4864:20::62a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 76B7AEB50E5E for <emailcore@ietf.org>; Fri, 8 May 2026 10:01:04 -0700 (PDT)
Received: by mail-pl1-x62a.google.com with SMTP id d9443c01a7336-2ab232cc803so11199415ad.3 for <emailcore@ietf.org>; Fri, 08 May 2026 10:01:04 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1778259663; cv=none; d=google.com; s=arc-20240605; b=byUiEEDXFrggUhLeLiwdpn13g+JGIMetqSIa6ZzXBZx62Xvu+92nv6wLxPzd3sQ0KP Y0qmlRLgMPFVSpug5cJa7emsZBoN9oRdI0Zw2HZopfMvMccWrjE70e81z0njeI/PBeZL ASvcxjaaF8BqxBWEwC/c5WS9bAEOmJkIp0w/rKhfxuUFcik4T64k01GG7lQ5R8OsmIJ3 SPt2MIQCAna5p2EQtupTr+cKc07xmcOQ84CZ5Ti4uA0Agx2oApSpEOHcJcntcSUbfPFq rYXAQ8TFpCn+6VV0Z6vPrcTb4AtPc+/3MWfbav/ndG2Anm/x/ejQfsFR+oITMVIS9JMN wqvQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=XuiG0fYDy6UZ18P3eEhm2NHNOg1v0kH4wu6zni4N/yg=; fh=68u5Kg0HQxaE+SFJUG2HMVjRImN2NljL49pdNcRZ7l8=; b=W2g+CvEuMZnDxUREyINY2+IGnbAo3xDhq14+pnfj2Gb3oX91dCMTCjzyD1ydWpFIJO Kl1dCvXPwQ+MIYRy1ePJPcI3wd28r502kBHYaXExrb/+u5FYSU8Iib8K6wAnipNS44iE WTCavxly1o8bisQHH4E23ybJMHnMcNvIf9y1yehJJgH3bYoBD4+bu2t0CiulCBe30KtR GISjfFHtTN+UKXRvIw3gEsphWTI7w7zaZKcH66KY3b+oEbaf75zFnnCXiLlbKoLtE/eS Ikefg+zAyPnFpJDU0QLueLeVsMZIlIMHKjJ4d3baJp4AndxtkJUV8U30lVp/Ag2kif/3 fOYA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1778259663; x=1778864463; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=XuiG0fYDy6UZ18P3eEhm2NHNOg1v0kH4wu6zni4N/yg=; b=jBJBevoj9gSHkMvHNYrcoVkCe9rtNCHwL5KUZvjuBQ8pb/BhL/uSBFfRFYoMxRMzSh boPzVeTQFiFFdKkyRw/z/bp/Gy5EcgNXaFTQ5WfAt3Gm+de99wouKuq6uabCgms/I2mN MiSO0CjcGipnPAaSM18bv+DWRNU8w/sTopmkuOeh5XS/uv12hmhH51ivfTMK/A2kcEnp Es8EgoOW/MLhtOFft3bMNg8FEt7tSsavJ4d2Dow4rUryrSS2BeH0JcmGU5mE8nrBTpVJ 8w8Vy1FgFkIioH9bmg6u72stGnOoRuPlS/LfMCrrrpAXXfKYHYFK/MqyB2h2Iwsl3ccs mxlw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778259663; x=1778864463; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=XuiG0fYDy6UZ18P3eEhm2NHNOg1v0kH4wu6zni4N/yg=; b=GTnFAFn0QtmGuR9Os4YI0gqnNNmpqVq1YuVPmvpEcI7GiMhgyTGvI0AbeCDF8BzyUz TuVXeEKEWU2y5Hu0jaJ+QClZTHpbedrgTEI5BJkFRqFIgQFeBJHLVKyZU12Ig7chUAvN UpkCnvYJaYRuU1JC9gyBLbMWno8PUm49MWgVXOr2S8pkBFfZYxpAK+dFrTRqrPhFYEui 1W1iix8Z26muQx/mqNrR8ZYENORNueXD0+ES+5Bn5gTQZPDVbuaZ9ISIgZ2KX/1Y7sSp ggXUO8evbnk1UirMbnzATLoOz8ksV0260tIrOEQLPb/kKPXdkGYJTUebLrXPeKynVb0P fYmQ==
X-Forwarded-Encrypted: i=1; AFNElJ+5O4DYkVN8r/w/22suvQGttuUTgaNZdLd89wD+Y/HNvYkfSd718K7oqtSDFvFYlG/5XrMY00gpXVc=@ietf.org
X-Gm-Message-State: AOJu0YwLGF9EEdSaWWboaf6Sx1d6biz6J0zhEt5xyhA+qYSyaN3xT5X1 6HfuCOjzDmJdvMbokkcW33S04rotN1PNSoQZhMabBiV6g++B0soH3QCnJK0iHHr6U/ICx+H8c/g fnfv6/T6/ajUoVhjKwJ4oFyTWNzNyHE8=
X-Gm-Gg: Acq92OHAmvIiaZuev9X3/4VYut4AAA6iJhvLbVdlGpAhRfa1NKXGz5skqWKTTqeo50p zRXY/cGkqyqK4fhamuPu/POj51NNaWZOKdErdi+t0DJtcY3iTS79TeIyb1TJl/FdZ4xovTWkSFX U72weblTFiYGNZv3BKEKj8MWz4yjbRHbkPdplz0dtFTtCB5lm7XrstaepuT03tndL+UooBXD78C q5tMpCS/mOpzB/mUuWNjrBAMeSTHzM2/sYhpm0uOiNmp/i4G/77O6nlRQ7Bt/B0+S79rDlenwK0 9971JE/AVmWGi1y8t6Xckkw9ynfFb5mBgr0Ezqhj
X-Received: by 2002:a17:903:390f:b0:2b0:5ae9:ee4 with SMTP id d9443c01a7336-2ba79285966mr131726335ad.5.1778259663190; Fri, 08 May 2026 10:01:03 -0700 (PDT)
MIME-Version: 1.0
References: <CAChr6Sy4RJ66gUXR=U9GbKjEu-+7z5EFZVDtqPbtrkomPfoK_w@mail.gmail.com> <7278d338-d2f7-43e8-8fc5-8feab1ba7323@it.aoyama.ac.jp> <CAChr6SyyLN4VvN+-E5aAAiiOS_zf6YvaLiUitr7iGxT8g_7eeA@mail.gmail.com> <9C88DE56-ACDE-40B4-A42E-312F01624400@episteme.net> <CAChr6SwLzCqEjhokjEOtho9WS4QpSSTgWVKbNHSJ3b6-edUudg@mail.gmail.com> <3F42732A-8055-4DC9-9B71-E40DCE15AD55@episteme.net>
In-Reply-To: <3F42732A-8055-4DC9-9B71-E40DCE15AD55@episteme.net>
From: Rob Sayre <sayrer@gmail.com>
Date: Fri, 08 May 2026 10:00:51 -0700
X-Gm-Features: AVHnY4LCiOowLbqCc1KWa8-z3nB2wHJmwp8woCKr2-8mSShrbNyaqU8LnOCjYWI
Message-ID: <CAChr6SyNLFRNZbJcvA+aKYeYp++17LQ37S-48hR+fh7_ZCTQsg@mail.gmail.com>
To: Pete Resnick <resnick@episteme.net>
Content-Type: multipart/alternative; boundary="0000000000008affa90651515743"
Message-ID-Hash: 2IRRJ4Y4FX24D74T7QZPTLTDXWO5BA3F
X-Message-ID-Hash: 2IRRJ4Y4FX24D74T7QZPTLTDXWO5BA3F
X-MailFrom: sayrer@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "Martin J. Dürst" <duerst@it.aoyama.ac.jp>, emailcore@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Emailcore] Re: [Last-Call] draft-ietf-emailcore-as-28 ietf last call Secdir review
List-Id: EMAILCORE proposed working group list <emailcore.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/emailcore/1ttjfmFAJQvHtHxZmYxfG4TVfOM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/emailcore>
List-Help: <mailto:emailcore-request@ietf.org?subject=help>
List-Owner: <mailto:emailcore-owner@ietf.org>
List-Post: <mailto:emailcore@ietf.org>
List-Subscribe: <mailto:emailcore-join@ietf.org>
List-Unsubscribe: <mailto:emailcore-leave@ietf.org>

On Fri, May 8, 2026 at 9:53 AM Pete Resnick <resnick@episteme.net> wrote:

>
>
> > Why would a server advertising MTA-STS support cleartext?
>
> Because a server advertising MTA-STS is simply saying, "If you want to
> get to me using encryption and want to make sure that you are getting to
> the right place without any in-path attacks, here's how to do it." It is
> not saying, "I do not wish to receive unencrypted communications."
>

Well, is it "Strict" or not? I think it really does say "I do not wish to
receive unencrypted communications." That is how it prevents active attacks
on STARTTLS.

https://datatracker.ietf.org/doc/html/rfc8461#section-5

But we're going in circles a bit, and I've said my piece.

thanks,
Rob

v2.43.4 | Report a Bug | By Email | System Status