Re: [ietf-smtp] why are we reinventing mta-sts ?

Viruthagiri Thirumavalavan <giri@dombox.org> Tue, 08 October 2019 21:48 UTC

Return-Path: <giri@dombox.org>
X-Original-To: ietf-smtp@ietfa.amsl.com
Delivered-To: ietf-smtp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ADDA120033 for <ietf-smtp@ietfa.amsl.com>; Tue, 8 Oct 2019 14:48:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=dombox.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tNPv1L8uoKuI for <ietf-smtp@ietfa.amsl.com>; Tue, 8 Oct 2019 14:48:08 -0700 (PDT)
Received: from mail-pl1-x634.google.com (mail-pl1-x634.google.com [IPv6:2607:f8b0:4864:20::634]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E00712022D for <ietf-smtp@ietf.org>; Tue, 8 Oct 2019 14:48:08 -0700 (PDT)
Received: by mail-pl1-x634.google.com with SMTP id c3so2585plo.2 for <ietf-smtp@ietf.org>; Tue, 08 Oct 2019 14:48:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dombox.org; s=default; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=eEoZaf5zbbaKUjo9qUiyi3yALvRKHS07RMZtrEqbA1k=; b=jzvEZrauLhgGJuCwI1k9VEolpJii/C1UaiS8ITD5tQw+kSUWslyRtDBv87Tc28L91j NUHQ2A++/C0by4jIfOLturHfaWKflsPFjJd8a3voUkOBIECwEzu3HjZObQwlp8FinGs8 KOr1CVNb/n2M22TeTXnaSLflHEihXflwuhDd215n/PNQpzg/GESRJrT7gjHeQUl5PMoP P7+XtWZvhyN+Dvtk6NROcj8ztLKsp+QhKSodTfgGV+1DNx1ZDaYXYNH93Px4qQeCr+Bt wJ2s1Aqib7CZYrcN3SiZtF6LBKFsjiFGJMFkF3LSOASU7d6BLL5cJznlevtjcZkvknNh q2+Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=eEoZaf5zbbaKUjo9qUiyi3yALvRKHS07RMZtrEqbA1k=; b=NRe7H7ew2tydu3EpJmTznLTyOD/T0iInvyiSKzYH/jopbFUI1OdFiVfJzT0iChQ0xR IdVxrI7RI1cogcf4OxF2LeXpHKq0xQxPYKPcR5zp4AC4n6jyZlw7HewhnUUGoOC5o7qg itvTH2AnEyNdtnlM3E6dTC35+IxmYSAG1KpkV1YaZM/0PR/BAC/IxJzNkWgUAketVibg QRdOM4flCBPk7b4zkmgf59tpzeGGuxwcjMV4rhUPKJ8h1G0LvAefrt1bIxcDtU+5huAN fhkfdzSYXvqH+DKPUPfDV9zbqA9yhLbw3nnAVkxSmaensSoSVS9uL/o7MbWAJfQnNbNw aqsg==
X-Gm-Message-State: APjAAAXH8zSanrXNAUqF+J9H23S0mEpJ37Zj6BhKLMBmvr+qGsz6LvS0 eTvgbydNfz3n/ftICrTHbb+6U0SrLCPqrdWMrpYJJA==
X-Google-Smtp-Source: APXvYqxcXM5fj9QjKYsVY9tgfd9PufHKpA6levEG/amKgxTIy1+4P0HAQ+pckOddJXQL7H5OAuClLXaBeIBmBMDLvVQ=
X-Received: by 2002:a17:902:8d87:: with SMTP id v7mr6077768plo.126.1570571287272; Tue, 08 Oct 2019 14:48:07 -0700 (PDT)
MIME-Version: 1.0
References: <20191007002348.GA23742@x2.esmtp.org> <20191007015616.BE113BB3D68@ary.qy> <CANtKdUeC0NVfvVpbHtwd=OoO=BoT8KNWVx8BGF-GPZPU-zo6QA@mail.gmail.com> <CAOEezJTH4Jukz2J4jSDfixECg2Jyyk4+cDnasiAoa4Q2F9=ZZw@mail.gmail.com> <b0dae4ca6e95dc83ca70f71ad780a1432273bcf5.camel@aegee.org> <CAOEezJRXUZkPoJn_kV92q=OQoUs32VzTR5a0JeAKg6NYBW55=Q@mail.gmail.com> <19705.1570469430@turing-police> <f7b9f700-7303-449d-8212-147f29d0bdfd@www.fastmail.com> <78878.1570543102@turing-police>
In-Reply-To: <78878.1570543102@turing-police>
From: Viruthagiri Thirumavalavan <giri@dombox.org>
Date: Wed, 09 Oct 2019 03:17:41 +0530
Message-ID: <CAOEezJROAYvYzEnxvZmbn+UaJR37yHATNfOv0JY4ib6wexSfhw@mail.gmail.com>
To: Valdis Klētnieks <valdis.kletnieks@vt.edu>
Cc: Stan Kalisch <stan@glyphein.mailforce.net>, SMTP Discuss <ietf-smtp@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ac36b305946d1fba"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-smtp/90vQnEKXfEMlg4xP6-ujRJdjPVc>
Subject: Re: [ietf-smtp] why are we reinventing mta-sts ?
X-BeenThere: ietf-smtp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of issues related to Simple Mail Transfer Protocol \(SMTP\) \[RFC 821, RFC 2821, RFC 5321\]" <ietf-smtp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-smtp>, <mailto:ietf-smtp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-smtp/>
List-Post: <mailto:ietf-smtp@ietf.org>
List-Help: <mailto:ietf-smtp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-smtp>, <mailto:ietf-smtp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Oct 2019 21:48:17 -0000

>
> 1) You're outsourcing the e-mail to a company. The added cost for the
> webserver
> will probably be close to zero, because if the proposal gets enough
> traction to matter,
> hosting companies will be able to do it at scale, and bundle it for free.


The future you are predicting would look something like this. "Buy our
hosting package and get $99 worth web server + $99 worth SSL certificate
for free for MTA-STS". When these hosting companies offer something for
free, it's "Free" as in "Freebie". Not "Free" as in "Freedom". We are not a
marketing team for these hosting companies. We are here to solve a problem
and we have to do it in the most efficient way.

A problem can be solved in many ways. Let's just say, a patient goes to see
a doctor with a rash on his leg. The doctor chops off patient's leg and
then give him a walking stick. Technically speaking, the doctor solved the
patient's problem. But, is it the right way to solve the patient's problem?
Maybe in 10,000 BC. But in the modern world, it makes sense only if the
rash was caused by a life threatening disease and it is the only way to
solve the problem.

When the doctor do this on a massive scale, he can definitely afford to
offer a free walking stick for each patient. So If you are going to
evaluate his solution based on the walking stick cost, then that's gonna
produce abnormal results. Without the leg, the patient has to depend on the
walking stick forever. That's a huge inconvenience and it is one of the
most notable variable to consider.

In the case of MTA-STS, SMTP has to depend on a web protocol forever and
that's the prima facie reason why MTA-STS is bad. Cost being prohibitive is
one of the secondary reasons. Speaking of cost, you are being subtle here.
"probably be close to zero" is not the same as "zero". We don't have
control over a company's business model and these hosting companies usually
find a way to increase their profits. e.g. Google recently increased their
G-Suite pricing by $1. So even if you put $1 as price tag for each MTA-STS
deployment, the world will be spending millions of dollars once it get
popular. That's not "close to zero". Most people in the world would like to
save their money even if it just a penny.

Bottomline is, MTA-STS should be used as a last resort when there is no
better alternatives possible. And that's just my humble opinion.

On Tue, Oct 8, 2019 at 7:36 PM Valdis Klētnieks <valdis.kletnieks@vt.edu>
wrote:

> On Mon, 07 Oct 2019 15:10:29 -0400, "Stan Kalisch" said:
>
> > That may be, but I do not think, however, that this addresses
> Viruthagiri's
> > assertion about the cost being prohibitive for some in developing
> countries.
>
> The point is that there's 3 basic cases:
>
> 1) You're outsourcing the e-mail to a company. The added cost for the
> webserver
> will probably be close to zero, because if the proposal gets enough
> traction to matter,
> hosting companies will be able to do it at scale, and bundle it for free.
>
> 2) You're doing low-volume e-mail in-house. The added resources needed for
> the webserver will probably be close to zero, because somebody will write a
> "how-to" or even write an open-source program that you enter your domain
> name
> and host name, and it writes the config files for you.
>
> 3) You're doing in-house e-mail at a volume that the web server resources
> matter.
> At this point, you're *already* going to be fighting with scaling issues
> with  your SMTP
> system and the web server is the least of your worries....
>
> Yes, in some situations the cost of e-mail for an organization can be
> prohibitive.
> However, this isn't a proposal that doubles the cost of doing it. It's
> more likely
> going to add a half-percent or so - there's probably going to be a
> half-dozen things
> applying more economic pressure.
>
> And it's probably *far* too early in the protocol design process to be
> saying "oh,
> but this *might* be a problem for a very very small percentage of sites" -
> especially
> since we're talking about an *optional* extension.
>


-- 
Best Regards,

Viruthagiri Thirumavalavan
Dombox, Inc.