Re: STARTTLS & EHLO: Errata text?

Paul Smith <paul@pscs.co.uk> Fri, 30 January 2009 09:40 UTC

Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n0U9eMjf068982 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 30 Jan 2009 02:40:22 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id n0U9eML3068981; Fri, 30 Jan 2009 02:40:22 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smtp@mail.imc.org using -f
Received: from mail.pscs.co.uk (mail.pscs.co.uk [77.240.14.73]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n0U9e81Z068967 for <ietf-smtp@imc.org>; Fri, 30 Jan 2009 02:40:21 -0700 (MST) (envelope-from paul@pscs.co.uk)
Received: from lmail.pscs.co.uk ([62.3.195.6]) by mail.pscs.co.uk ([77.240.14.73] running VPOP3) with ESMTP; Fri, 30 Jan 2009 09:40:03 -0000
Received: from [192.168.66.101] ([192.168.66.101]) by lmail.pscs.co.uk ([192.168.66.70] running VPOP3) with ESMTP; Fri, 30 Jan 2009 09:39:03 -0000
Message-ID: <4982CAB7.1030308@pscs.co.uk>
Date: Fri, 30 Jan 2009 09:39:03 +0000
From: Paul Smith <paul@pscs.co.uk>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: John C Klensin <john+smtp@jck.com>
CC: Tony Hansen <tony@att.com>, ietf-smtp@imc.org
Subject: Re: STARTTLS & EHLO: Errata text?
References: <497DE492.4080506@pscs.co.uk> <497DED29.70402@att.com> <497ED420.30708@pscs.co.uk> <alpine.LSU.2.00.0901271403220.4546@hermes-2.csi.cam.ac.uk> <497F86CB.60904@att.com> <alpine.LSU.2.00.0901281434440.4546@hermes-2.csi.cam.ac.uk> <498088B8.9040404@pscs.co.uk> <alpine.LSU.2.00.0901291310080.4546@hermes-2.csi.cam.ac.uk> <4981C0D5.1010401@pscs.co.uk> <4981C6BD.2040900@att.com> <37F39FF37390694B69567838@PST.JCK.COM> <4981E1AB.9000002@att.com> <3B757DEDD02F9E7C1ADBD4EF@PST.JCK.COM>
In-Reply-To: <3B757DEDD02F9E7C1ADBD4EF@PST.JCK.COM>
X-Enigmail-Version: 0.95.7
Content-Type: multipart/alternative; boundary="------------090605050603090307040702"
X-Authenticated-Sender: paul
X-Server: VPOP3 Enterprise V2.6.0e - Registered
X-Organisation: Paul Smith Computer Services
X-Authenticated-Sender: Postmaster
Sender: owner-ietf-smtp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-smtp/mail-archive/>
List-ID: <ietf-smtp.imc.org>
List-Unsubscribe: <mailto:ietf-smtp-request@imc.org?body=unsubscribe>

John C Klensin wrote:
>> Old text:
>>    The client SHOULD send an EHLO command as the
>>    first command after a successful TLS negotiation.
>>
>> New text:
>>    The client MUST send either an EHLO command or a HELO
>> command as the    first command after a successful TLS
>> negotiation.
>>     
>
> s/HELO command as/HELO command, or a command that does not
> require that a mail transaction be open, as/
>
> That can be done in several other ways, but I don't think you
> can or should prohibit VRFY, EXPN, HELP, etc., there.
>   
Just going back a step, shouldn't it be worded something like

"The client MUST send a EHLO command after a successful TLS negotiation
if it wishes to start a mail transaction or use any SMTP extensions."

Because that's actually what we mean.

Also, saying 'or a command that does not require that a mail transaction
be open' means that you could use an SMTP extension which was advertised
before the STARTTLS, as long as it doesn't involve a mail transaction,
without resending EHLO.

-- 
Paul Smith

VPOP3 - POP3/SMTP/IMAP4/Webmail Email server for Windows