draft-fanf-dane-smtp-02

Tony Finch <dot@dotat.at> Thu, 31 May 2012 17:39 UTC

Received: from hoffman.proper.com (localhost [127.0.0.1]) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q4VHdelB046075 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 31 May 2012 10:39:40 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
Received: (from majordom@localhost) by hoffman.proper.com (8.14.5/8.13.5/Submit) id q4VHde3d046074; Thu, 31 May 2012 10:39:40 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
X-Authentication-Warning: hoffman.proper.com: majordom set sender to owner-ietf-smtp@mail.imc.org using -f
Received: from ppsw-51.csi.cam.ac.uk (ppsw-51.csi.cam.ac.uk [131.111.8.151]) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q4VHddCR046069 for <ietf-smtp@imc.org>; Thu, 31 May 2012 10:39:40 -0700 (MST) (envelope-from fanf2@hermes.cam.ac.uk)
X-Cam-AntiVirus: no malware found
X-Cam-SpamDetails: not scanned
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-2.csi.cam.ac.uk ([131.111.8.54]:58334) by ppsw-51.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.158]:25) with esmtpa (EXTERNAL:fanf2) id 1Sa9LW-00033G-Y5 (Exim 4.72) (return-path <fanf2@hermes.cam.ac.uk>); Thu, 31 May 2012 18:39:38 +0100
Received: from fanf2 (helo=localhost) by hermes-2.csi.cam.ac.uk (hermes.cam.ac.uk) with local-esmtp id 1Sa9LW-0004oO-Hq (Exim 4.67) (return-path <fanf2@hermes.cam.ac.uk>); Thu, 31 May 2012 18:39:38 +0100
Date: Thu, 31 May 2012 18:39:38 +0100
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-2.csi.cam.ac.uk
To: dane@ietf.org, ietf-smtp@imc.org
Subject: draft-fanf-dane-smtp-02
In-Reply-To: <alpine.LSU.2.00.1205292125300.10076@hermes-2.csi.cam.ac.uk>
Message-ID: <alpine.LSU.2.00.1205311835220.5807@hermes-2.csi.cam.ac.uk>
References: <alpine.LSU.2.00.1205251812480.572@hermes-2.csi.cam.ac.uk> <alpine.LSU.2.00.1205292125300.10076@hermes-2.csi.cam.ac.uk>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: owner-ietf-smtp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-smtp/mail-archive/>
List-ID: <ietf-smtp.imc.org>
List-Unsubscribe: <mailto:ietf-smtp-request@imc.org?body=unsubscribe>

Another version, with less added text this time - I've included a copy of
the change log below. Many thanks to everyone who has taken the time to
read the draft and comment.

     Clarify the wording that describes how a client determines that
     this protocol is in effect.

     Divide the security considerations into sub-sections, and add a
     subsection on denial of service.

     Clarify intro, mentioning TLSA owner name format.

     Extend the scope to cover MTA-to-MTA mail within an ADMD as
     well as between ADMDs.

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
Viking: North 4 or 5, backing northwest 5 or 6. Moderate, occasionally rough
later. Showers. Good.

---------- Forwarded message ----------
Date: Thu, 31 May 2012 10:33:51 -0700
From: internet-drafts@ietf.org
To: dot@dotat.at
Subject: New Version Notification for draft-fanf-dane-smtp-02.txt

A new version of I-D, draft-fanf-dane-smtp-02.txt has been successfully
submitted by Tony Finch and posted to the IETF repository.

Filename:        draft-fanf-dane-smtp
Revision:        02
Title:           Secure SMTP with TLS, DNSSEC and TLSA records.
Creation date:   2012-05-31
WG ID:           Individual Submission
Number of pages: 13

Abstract:
   SMTP has a STARTTLS extension, but (especially in the case of inter-
   domain mail transfer) it only provides very limited security because
   it does not specify how to authenticate the server&#39;s certificate.
   This memo specifies how TLSA records in the DNS can be used for proper
   SMTP server authentication.

The IETF Secretariat