IETF Logo Mail Archive

[Last-Call] Re: [Emailcore] draft-ietf-emailcore-as-28 ietf last call Secdir review

Eric Rescorla <ekr@rtfm.com> Wed, 29 April 2026 00:16 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: last-call@mail2.ietf.org
Delivered-To: last-call@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 98ED6E53FC04 for <last-call@mail2.ietf.org>; Tue, 28 Apr 2026 17:16:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777421774; bh=9cCRB40Q9poukPiWJj0Wjp/5Odl+mq3BF/rU4JfblL0=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=SPGje4KBWtNSJMu6PRj0zZUuE6lP1Y+eOoABXEn2hvW5lb3QZaoqFgq1R7nYD+x2t Fvnyna4ZwgOTm2Twp1mKeSohZIgRtxezMTbFY3iei0ZGylbUvHP/BHJ63RLZwu6KE5 sRyx3uA6rr7DH8ZVymWOA0QzmyMrqtZ8A92vsq+I=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J8oCUgFcJfxy for <last-call@mail2.ietf.org>; Tue, 28 Apr 2026 17:16:13 -0700 (PDT)
Received: from mail-yw1-x112d.google.com (mail-yw1-x112d.google.com [IPv6:2607:f8b0:4864:20::112d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 974D5E53FB8A for <last-call@ietf.org>; Tue, 28 Apr 2026 17:16:11 -0700 (PDT)
Received: by mail-yw1-x112d.google.com with SMTP id 00721157ae682-7b248750279so121021997b3.0 for <last-call@ietf.org>; Tue, 28 Apr 2026 17:16:11 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1777421771; cv=none; d=google.com; s=arc-20240605; b=JNlCTLuFFY9B1jMpWYBBOA3Gcgxvkc0ywbNOdsbHcgfSDjgtlZ95zE1iZbPgsj78sR rUpnCjYX7juKTsgYZfxchUJFID/bHqh8skONGsEhMKV+N3GjE0nsNwgeNLg6BLi3y8Nn l2arUWYUF6JArBOvyhi6/jaOHRDGGTrTnUgZJ+yrSCBtJWloqLwOlofw0/Uhi9r79WKL n+mqb5s3l1/9ojokprjxOFUJUT+K7DZoKuz3iP8iHa8uv18K+4cuFZMjpFAnhA+HgX57 Id7xfUA3alD97GlTS5gqqa/37MiIZx+eESKMXxUIy46xX0B10zf8U1PrThgFphbabmWu cmwg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=MZvI/uwBzuwCLJcUcNHCkk3EFB9U0v8e4PUtLPyDJ5Y=; fh=yulosX14U2uDbLazE2+b3S3LF1sx58qoXQ6fPKO9yzI=; b=QQenaAcS4gL9/X5dUKtwHN3IoytRD2NAhexHhsPgb2B4uXSIh7ZFMyBpLbQ9PX92R6 ATIuvMhro8pgRwhMyA6jJAkJ7bFKpRYcIYc5R5pwtu6Jsjelkj9EJDaI/zivywIpt2iO pQm9K+/izV8z6IaFjg9+eJMLZFgODfFV3K3O/2mxHZSkkjqFiS72eQ2Ptdo2wljs28vx NwSS4HMB2RHs+gxgD65ffgyZVMDykvPt1UdER1KJ/nJON0m8pb+1L4ybyrbtfpjmUe3k BSLLJvU9a+aqKrqa9obAxnAD3aAf0pIJ5zeQo8Dp5fiYERAuEqTEUT2ghjLttx0SpG18 D8ng==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20251104.gappssmtp.com; s=20251104; t=1777421771; x=1778026571; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=MZvI/uwBzuwCLJcUcNHCkk3EFB9U0v8e4PUtLPyDJ5Y=; b=RlAx97loskAlX7n/AfZaqA9/badrH6lz7ePmyuOM7a18dklUQSBpwiFhFR8Rt5xtDz Z3Pw7HMqfqzCxrHp1/74iQbx7FAl174nrMlOV1CvCgtXWjMmc9eopfMyc94xb7AEQ9M7 e6higLqdbEKBOzwUjE3kObbSht9VrEnN8JgdYHz4GRb/f3blHQOumP6nGee+0D4tFntG 8uDOwBWRX8xQueGKk7sz9jpttktYbIkJUalngCWrXZe0NOBOmd6xFOPkiPaRrvMbKGsV Ye1q/AY4GvZjB0XJMWoTEoPhZS0HCYM2DlxQozmChPQSC9/nlIziGofHLap3Y+n5kgpZ Fspw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777421771; x=1778026571; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=MZvI/uwBzuwCLJcUcNHCkk3EFB9U0v8e4PUtLPyDJ5Y=; b=czuoKTdv1FjdHZ0xrophDhPtmI/l469jHyFqUGzV5AQkS2wgF/hKKb2xb/3gNYvh04 vC92iMwR3b/E7F+4TOM0V97Vyq/Htn82sZav8LsZH9EPjtA8HgncbLU1AGpbhrJ8TdGw aW8tfIp0TZg+INB0xg74evMOochg4Xbg0t68Nfou1VaN7QL+zs2YZA/2QBoJES+W7+Ho tr0g8RjY3N1NTUpam+zt6dmi5g/zdb2Cpx8oRIoTQbkipcdg+GC+TqSFKUs4lxayE/6k 2BVP43IuxZIoOp60w5ZEUsP8iYDCLQAL3GAlH3NHuw5WkP3BpLzthnlt6Fi/jMK8/hq5 /aVw==
X-Forwarded-Encrypted: i=1; AFNElJ8puXRWQi0xt/t31cmt+SnFdm1zxumKUWJYNK0sRNFGJlnZe00kW+k5ywX6cyxriv8fnNbudDUp7o0=@ietf.org
X-Gm-Message-State: AOJu0Yy1q3NU0Qg0qxm0a2cDH54u9COd30IfgCyuh3EtWdet12XeUm8c DpUj1PqHcWSphPq5GvQvGkMMrBCyhUv7vIt67dT0st3Gh9yV3tVX+YzpG2ZBESXdnTgKmgF1v/O VUQnPObt7lCJC3nQE728kqx4MQkjEUF9HR99fI88/aA==
X-Gm-Gg: AeBDiesnyKLzQPDF1KWpB1Xq4YOI/z2BUSCvW/18lFMGvftWdCmiAXyyCwKe+eUgpkD 1ScfNFpHU0gkXtiKskqEA2wTyPdk8UjnFmLS3+NXbvgmE4xRrSgRP1LvBVHg5kJsrSDtvc3fNFy WGEZoTSAY025ciP041P+YRt2NLMD/IyWW/1ysKVDSEjF5OM2Chk32fjU1I7zD1jXvy0t7up52hp ls1ELrjfoMOIrHzPdLoYz1ZDw+0KtFSJHY9UI+ZNFa74IIyrfXQRxLe2yQaA2tojhjG4NxrzFOa gHjNTfRtKcIIo25swMITtj/1R+CtOYDejx4ycD0W9PYGjAtu/ne3S9u4LiuqHisZUM7b1DDzUeq E208E2jVIwF7NaUKPkH3uj2tVb7EODOlYeq2uon/f4m8=
X-Received: by 2002:a05:690c:4484:b0:79a:c40d:b734 with SMTP id 00721157ae682-7bcf58d0b92mr56175967b3.48.1777421771174; Tue, 28 Apr 2026 17:16:11 -0700 (PDT)
MIME-Version: 1.0
References: <177735548849.818.15891659530280505461@dt-datatracker-b45949c58-t72jx> <CALaySJLPRjnhP_SRCoKdBuHZkMsLYcQB5g-Pf3ra14mqYG86tg@mail.gmail.com> <5d69c4a4-e16c-4c0b-bb0e-09887d062da9@lear.ch> <CABcZeBOK0wR5i1Y9Lxa6JzgF6nxzLU25pZa4Sida01VaowBGGA@mail.gmail.com> <fc87c6da-4c02-4030-84f1-092a8511c5c3@lear.ch> <CABcZeBP5q4kWtSXYhkStC7Yc-OYmVNfEJ4Dn7Ef_RNf_g74ucA@mail.gmail.com> <16e19e54-7f69-4ecc-a5f0-dcffd7a0d3b2@lear.ch>
In-Reply-To: <16e19e54-7f69-4ecc-a5f0-dcffd7a0d3b2@lear.ch>
From: Eric Rescorla <ekr@rtfm.com>
Date: Tue, 28 Apr 2026 17:15:00 -0700
X-Gm-Features: AVHnY4IeNueC8VUHn-gPeF7H7SDZzHqLPE--yIgz-LBmD8sdiAIN3Yi8tMcUiFM
Message-ID: <CABcZeBP0e0TS4F_aQvvER+pt87rgGiARudKTEKzD0roEyESvZQ@mail.gmail.com>
To: Eliot Lear <lear@lear.ch>
Content-Type: multipart/alternative; boundary="00000000000049826c06508e41ec"
Message-ID-Hash: 23D32KMD7X4G4CNZINNJ3BD7C43WN56H
X-Message-ID-Hash: 23D32KMD7X4G4CNZINNJ3BD7C43WN56H
X-MailFrom: ekr@rtfm.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Barry Leiba <barryleiba@gmail.com>, Shivan Sahib <shivankaulsahib@gmail.com>, secdir@ietf.org, draft-ietf-emailcore-as.all@ietf.org, emailcore@ietf.org, last-call@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Last-Call] Re: [Emailcore] draft-ietf-emailcore-as-28 ietf last call Secdir review
List-Id: IETF Last Calls <last-call.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/last-call/GKZJ30OQts0SRlVJKhfOC3pWNg0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/last-call>
List-Help: <mailto:last-call-request@ietf.org?subject=help>
List-Owner: <mailto:last-call-owner@ietf.org>
List-Post: <mailto:last-call@ietf.org>
List-Subscribe: <mailto:last-call-join@ietf.org>
List-Unsubscribe: <mailto:last-call-leave@ietf.org>

On Tue, Apr 28, 2026 at 1:08 PM Eliot Lear <lear@lear.ch> wrote:

>
> On 28.04.2026 22:05, Eric Rescorla wrote:
>
> I agree. They decide to do so by configuring their email servers
> appropriately and by deploying software that permits them to configure it
> how they want to.
>
> Then what's the problem?  The text essentially supports that point.
>
The problem is that the text levies a new requirement on implementors to
support such configuration.

The situation as it stands today is as follows:
Operators are free to configure support for cleartext SMTP or not.
Implementors are free to support cleartext SMTP or not. If operators want
to support cleartext SMTP they need to select an implementation which
supports that.

The situation after the new text is:
Operators are free to configure support for cleartext SMTP or not.
Implementors *must* support cleartext SMTP.

Again, we've got years and years of STARTTLS deployment without this
requirement. What's the evidence this requirement is needed?

-Ekr

v2.46.0 | Report a Bug | By Email | System Status