Re: [hybi] I-D Action:draft-ietf-hybi-thewebsocketprotocol-01.txt

Dave Cridland <dave@cridland.net> Thu, 02 September 2010 20:35 UTC

Return-Path: <dave@cridland.net>
X-Original-To: hybi@core3.amsl.com
Delivered-To: hybi@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5025C3A69B7 for <hybi@core3.amsl.com>; Thu, 2 Sep 2010 13:35:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.468
X-Spam-Level:
X-Spam-Status: No, score=-2.468 tagged_above=-999 required=5 tests=[AWL=0.131, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VXGTr46+eUSm for <hybi@core3.amsl.com>; Thu, 2 Sep 2010 13:35:35 -0700 (PDT)
Received: from peirce.dave.cridland.net (peirce.dave.cridland.net [217.155.137.61]) by core3.amsl.com (Postfix) with ESMTP id C2F673A6962 for <hybi@ietf.org>; Thu, 2 Sep 2010 13:35:16 -0700 (PDT)
Received: from localhost (localhost.localdomain [127.0.0.1]) by peirce.dave.cridland.net (Postfix) with ESMTP id D5AB711680B3; Thu, 2 Sep 2010 21:35:40 +0100 (BST)
X-Virus-Scanned: Debian amavisd-new at peirce.dave.cridland.net
Received: from peirce.dave.cridland.net ([127.0.0.1]) by localhost (peirce.dave.cridland.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P8110nzubjCa; Thu, 2 Sep 2010 21:35:37 +0100 (BST)
Received: from puncture (unknown [217.155.137.60]) by peirce.dave.cridland.net (Postfix) with ESMTPA id AAFCB11680AF; Thu, 2 Sep 2010 21:35:37 +0100 (BST)
References: <20100901224502.0519B3A687C@core3.amsl.com> <AANLkTikP1CF22fL0rBniXmrxEoBAbTNfzP9kyiNA4nbb@mail.gmail.com> <AANLkTi=_1m36ThFZTH_aGE_Unz0KTeexJq_74UGr2j+u@mail.gmail.com> <B68E5323-E259-4D27-BB32-ED86961209FC@gbiv.com> <20100902051929.GD10275@1wt.eu> <4C7F3F21.3000200@isdg.net> <20100902061613.GK10275@1wt.eu> <4C7F4C59.4010502@isdg.net>
In-Reply-To: <4C7F4C59.4010502@isdg.net>
MIME-Version: 1.0
Message-Id: <2348.1283459737.696752@puncture>
Date: Thu, 02 Sep 2010 21:35:37 +0100
From: Dave Cridland <dave@cridland.net>
To: Hector Santos <hsantos@isdg.net>, "Roy T. Fielding" <fielding@gbiv.com>, Server-Initiated HTTP <hybi@ietf.org>, Willy Tarreau <w@1wt.eu>
Content-Type: text/plain; delsp="yes"; charset="us-ascii"; format="flowed"
Subject: Re: [hybi] I-D Action:draft-ietf-hybi-thewebsocketprotocol-01.txt
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Sep 2010 20:35:43 -0000

On Thu Sep  2 08:03:53 2010, Hector Santos wrote:
> For example, one way to authenticate the WS client is to use IP  
> such as it done with POP3-B4-SMTP methods where a POP3 host records  
> an IP for another SMTP host to open a time window for SMTP IP-based  
> allow relay.

That's been long discredited in email circles, and is generally not  
supported, in favour of SMTP AUTH (and preferably a dedicated  
submission service on 587 with SASL and TLS).

The reason it's been discredited is actually because it's in a  
general class of error referred to as "Time of check to time of use".

Dave.
-- 
Dave Cridland - mailto:dave@cridland.net - xmpp:dwd@dave.cridland.net
  - acap://acap.dave.cridland.net/byowner/user/dwd/bookmarks/
  - http://dave.cridland.net/
Infotrope Polymer - ACAP, IMAP, ESMTP, and Lemonade