Re: [ietf-smtp] why are we reinventing mta-sts ?

S Moonesamy <sm+ietf@elandsys.com> Tue, 08 October 2019 13:35 UTC

Message-Id: <6.2.5.6.2.20191008055223.0b9c78e8@elandnews.com>
Date: Tue, 08 Oct 2019 06:35:24 -0700
To: Daniel Margolis <dmargolis=40google.com@dmarc.ietf.org>, ietf@ietf.org
From: S Moonesamy <sm+ietf@elandsys.com>
Subject: Re: [ietf-smtp] why are we reinventing mta-sts ?
In-Reply-To: <CANtKdUcmJDJMm0Vaet23pKBr=yL-jkWXhhr7NtwFvPiJgGwvig@mail.g mail.com>
References: <20191007002348.GA23742@x2.esmtp.org> <20191007015616.BE113BB3D68@ary.qy> <CANtKdUeC0NVfvVpbHtwd=OoO=BoT8KNWVx8BGF-GPZPU-zo6QA@mail.gmail.com> <CAOEezJTH4Jukz2J4jSDfixECg2Jyyk4+cDnasiAoa4Q2F9=ZZw@mail.gmail.com> <b0dae4ca6e95dc83ca70f71ad780a1432273bcf5.camel@aegee.org> <CAOEezJRXUZkPoJn_kV92q=OQoUs32VzTR5a0JeAKg6NYBW55=Q@mail.gmail.com> <19705.1570469430@turing-police> <f7b9f700-7303-449d-8212-147f29d0bdfd@www.fastmail.com> <CANtKdUcmJDJMm0Vaet23pKBr=yL-jkWXhhr7NtwFvPiJgGwvig@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/mHYqhhb9h80YlFwhgfhK9BQbIJM>
Precedence: list

Hi Daniel,
At 01:04 PM 07-10-2019, Daniel Margolis wrote:
>I'm interested to hear more about those situations.
>
>It seems like the primary concerns with additional costs associated 
>with MTA-STS are
>
>* the cost of buying a CA-signed cert (but what about Let's Encrypt?)
>* the cost of hosting your own HTTP server if you are in a hosted environment
>* the cost of hosting an HTTP server if you are hosting your own MTA
>
>Depending on the level of automation, I think the extra effort 
>required by MTA-STS ranges from "none" to, unfortunately, "some." 
>But I don't fully understand the scenario where it's a significant 
>economic burden beyond the basic cost of hosting an MTA. Can someone 
>help explain this better?

The mail service depends on a DNS service and a web service.  The 
system requires two CA-signed certificates.  The person responsible 
for all that will have to assess the extra effort.

I came across the following thread: 
https://support.google.com/mail/thread/10350042  The people on this 
mailing list can probably sort out such issues.  Whether the audience 
out there can do that is an open question.

Regards,
S. Moonesamy

Re: [ietf-smtp] why are we reinventing mta-sts ? S Moonesamy