Re: STARTTLS & EHLO

Tony Finch <dot@dotat.at> Mon, 26 January 2009 19:31 UTC

Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n0QJVPsF031969 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 26 Jan 2009 12:31:25 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id n0QJVP5G031968; Mon, 26 Jan 2009 12:31:25 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smtp@mail.imc.org using -f
Received: from ppsw-7.csi.cam.ac.uk (ppsw-7.csi.cam.ac.uk [131.111.8.137]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n0QJVESd031957 for <ietf-smtp@imc.org>; Mon, 26 Jan 2009 12:31:25 -0700 (MST) (envelope-from fanf2@hermes.cam.ac.uk)
X-Cam-AntiVirus: no malware found
X-Cam-SpamDetails: not scanned
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-2.csi.cam.ac.uk ([131.111.8.54]:39938) by ppsw-7.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.157]:25) with esmtpa (EXTERNAL:fanf2) id 1LRXAu-0006vV-P6 (Exim 4.70) (return-path <fanf2@hermes.cam.ac.uk>); Mon, 26 Jan 2009 19:31:12 +0000
Received: from fanf2 (helo=localhost) by hermes-2.csi.cam.ac.uk (hermes.cam.ac.uk) with local-esmtp id 1LRXAu-0005Ef-Od (Exim 4.67) (return-path <fanf2@hermes.cam.ac.uk>); Mon, 26 Jan 2009 19:31:12 +0000
Date: Mon, 26 Jan 2009 19:31:12 +0000
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-2.csi.cam.ac.uk
To: John C Klensin <john+smtp@jck.com>
cc: Tony Hansen <tony@att.com>, ietf-smtp@imc.org
Subject: Re: STARTTLS & EHLO
In-Reply-To: <62F21B7FAF870CE227D9F6CC@[192.168.1.118]>
Message-ID: <alpine.LSU.2.00.0901261924250.4795@hermes-2.csi.cam.ac.uk>
References: <497DE492.4080506@pscs.co.uk> <497DED29.70402@att.com> <62F21B7FAF870CE227D9F6CC@[192.168.1.118]>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: owner-ietf-smtp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-smtp/mail-archive/>
List-ID: <ietf-smtp.imc.org>
List-Unsubscribe: <mailto:ietf-smtp-request@imc.org?body=unsubscribe>

On Mon, 26 Jan 2009, John C Klensin wrote:
>
> Right. The quoted 3207 text says to me that the server is
> required discard the data sent earlier by the client as part of
> EHLO.  I don't see any expectation that it be required to
> discard the fact that EHLO was sent.

The quote is:
                             The server MUST discard any knowledge
   obtained from the client, such as the argument to the EHLO command,
   which was not obtained from the TLS negotiation itself.  The client
   MUST discard any knowledge obtained from the server, such as the list
   of SMTP service extensions, which was not obtained from the TLS
   negotiation itself.

The argument to EHLO is just an example and is clearly not the entirety of
what the server is supposed to discard.

> Indeed, unless there is something else in 3207, the client isn't
> even required to discard the response from EHLO with the
> server-supported feature list,

It is required to do so.

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.