IETF Logo Mail Archive

Re: Call for Community Feedback: Retiring IETF FTP Service

Adam Roach <adam@nostrum.com> Tue, 17 November 2020 20:11 UTC

Return-Path: <adam@nostrum.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C289D3A0A22 for <ietf@ietfa.amsl.com>; Tue, 17 Nov 2020 12:11:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.404
X-Spam-Level:
X-Spam-Status: No, score=-1.404 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, KHOP_HELO_FCRDNS=0.276, NICE_REPLY_A=-0.001, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=nostrum.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pXiZjHt6e1D9 for <ietf@ietfa.amsl.com>; Tue, 17 Nov 2020 12:11:52 -0800 (PST)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D72EB3A09D8 for <ietf@ietf.org>; Tue, 17 Nov 2020 12:11:49 -0800 (PST)
Received: from Zephyrus.local (76-218-40-253.lightspeed.dllstx.sbcglobal.net [76.218.40.253]) (authenticated bits=0) by nostrum.com (8.16.1/8.16.1) with ESMTPSA id 0AHKBhhx009710 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO); Tue, 17 Nov 2020 14:11:44 -0600 (CST) (envelope-from adam@nostrum.com)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1605643905; bh=Wu+eAuB2figIcv1lVbi4H3fbhSziaVvUcTbsWDOz1Lw=; h=Subject:To:References:From:Date:In-Reply-To; b=nKtojEwP7kc5TGUWfoEyKaGcjOyXFTCUOMGEILQFJNffdhaKO+vUM0Cy+DjkrRsj7 YXer1Ysgc3IV0ktD+8q+nq77as0Uf+pPrtLB+KVWKvW4rvsCU+OxxseFcTfIr49Kmn pK7KADSvGYifU1jEDDHSuUgbZm5nCORES0jx+ghc=
X-Authentication-Warning: raven.nostrum.com: Host 76-218-40-253.lightspeed.dllstx.sbcglobal.net [76.218.40.253] claimed to be Zephyrus.local
Subject: Re: Call for Community Feedback: Retiring IETF FTP Service
To: Robert Moskowitz <rgm-ietf@htt-consult.com>, Keith Moore <moore@network-heretics.com>, ietf@ietf.org
References: <af6ab231024c478bbd28bbec0f9c69c9@cert.org> <0D41F3FD-BA1F-4716-A165-4FE7529431A9@vigilsec.com> <D26DCBB6-3997-4A73-BB46-867B4FD79BD2@eggert.org> <27b80ed2-76fb-aee7-f22d-de56019e9aa9@nostrum.com> <a8bdd67a-13ea-4433-aa38-9cfd48ea28da@network-heretics.com> <0e875497-9986-a0d9-8354-3eac26b7f882@nostrum.com> <a02e15f2-34fb-4124-7ba0-c0ee0070b39f@network-heretics.com> <6a29096e-c76e-9bde-388c-bf411b235346@nostrum.com> <6ff3c8a8-57c9-a278-51ce-ce24fd2dfc0e@network-heretics.com> <01RS3W7DNPHA005PTU@mauve.mrochek.com> <27622517-8EC3-44D1-BB21-1F2071BCA2C2@cable.comcast.com> <5dc7b0d1-d565-92c5-293e-093040596f35@network-heretics.com> <4b46fe4f-0b5b-dbf4-9bd5-f0a4a6ee30c9@nostrum.com> <83cc127d-e3ad-8a6f-1b7f-011dfddc0185@htt-consult.com>
From: Adam Roach <adam@nostrum.com>
Message-ID: <88f5b2e4-779f-c7c1-38cd-494db571daac@nostrum.com>
Date: Tue, 17 Nov 2020 14:11:38 -0600
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.11.0
MIME-Version: 1.0
In-Reply-To: <83cc127d-e3ad-8a6f-1b7f-011dfddc0185@htt-consult.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/O62wKzn8zpA5REukytQheSq52oU>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Nov 2020 20:11:58 -0000

On 11/17/20 13:54, Robert Moskowitz wrote:
>
>
> On 11/17/20 10:57 AM, Adam Roach wrote:
>> On 11/17/20 09:45, Keith Moore wrote:
>>> Are those web browsers that are deprecating FTP also deprecating 
>>> HTTP without TLS?
>>
>>
>> Yes.
>>
>> https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/ 
>>
>>
>> https://www.chromium.org/Home/chromium-security/marking-http-as-non-secure 
>>
>
> This causes grief with firewall authentication where plain http is 
> needed for the firewall to intercept and force authentication. 


See also https://datatracker.ietf.org/wg/capport/charter/

/a

v2.23.0 | Report a Bug | By Email