[Last-Call] Re: [Emailcore] Re: Re: draft-ietf-emailcore-as-28 ietf last call Secdir review

John R Levine <johnl@ietf.email> Thu, 30 April 2026 15:20 UTC

Return-Path: <johnl@ietf.email>
X-Original-To: last-call@mail2.ietf.org
Delivered-To: last-call@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 4109AE6A6F52 for <last-call@mail2.ietf.org>; Thu, 30 Apr 2026 08:20:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777562402; bh=aFUL6R/u193/9dXeoeHMaZvruSc44GkPdEgZsGKdyv4=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=LolKj/6xpszKPtN2RcfR6jXnQ0fBvROSqZbo4T2FLwMTe4HtbhZnkq/pJh+y/anX8 zUF4iF38GWKHGBLI1CPbYT8CYJ7MZ9u5h6DUAAMXz8PhXUMMlGhVD8EUZqGq6h6uUR VfQ5dUNNe+dHMcjP4vAfVP6WOzH/NwcG0Mv2Rw4E=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.401
X-Spam-Level:
X-Spam-Status: No, score=-4.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b="fDNlcy44"; dkim=pass (2048-bit key) header.d=ietf.email header.b="wkjPb+Vy"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7mqUUDwS-DAB for <last-call@mail2.ietf.org>; Thu, 30 Apr 2026 08:20:01 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 79CFAE6A5E8D for <last-call@ietf.org>; Thu, 30 Apr 2026 08:17:36 -0700 (PDT)
Received: (qmail 68165 invoked from network); 30 Apr 2026 15:17:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:content-transfer-encoding; s=10a4369f37290.k2604; t=1777562246; x=1777907846; bh=aFUL6R/u193/9dXeoeHMaZvruSc44GkPdEgZsGKdyv4=; b=fDNlcy44Xx+f40BZHkE4/fG3R6un/38BHR1CHtLZ1SXQdSSad1DZqtMfS9H23712mNLUGIxQSY51oO7rPUoiQk2NycuVVDNmQOf11JBt39PndiCZKrNQMgU3+yagfuf3l3zUcMbczN7bTsV1VOtopxTvzUZJMKfZOV76iPo95zRBTJgMD6beZEwxN6GaS1t0YL2BaT4U225UxoseBO3qEbJvVf/MxY3srZMdeQnIl0VEXDqbh7cY6qLtu/2tK+f6dGh5L3IrMs6FGPxdhq6KsRiDtq/4XNdT40ZzB7tomOxStIRKO9tb4MVcAjAHAhkNOncp6gqROd0TqqiPlg4w1Q==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=ietf.email; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:content-transfer-encoding; s=10a4369f37290.k2604; bh=aFUL6R/u193/9dXeoeHMaZvruSc44GkPdEgZsGKdyv4=; b=wkjPb+Vy8Fp6U7dg+1H/u/BjjiefoAbD9+VkLHR21ajbDFWHAqaKjxB9NzNcB2UZVlsCnM28JxtyXcwA1cXMZUx/Yei6ruX/dxJAzdDiRI1alYA7VWWy/8POgmfzVfBb5/IWQmdgzB1aGdqZj7Hpx813MTfi9oHcxlNSLsr0wuDHalPAcP4LrgRdQx5owmeBs7SMSzeNPUfh3sG1iegfbe02MzoUxjOApP3EWi4nlpT4rE30i17UInxMNgf4fx30RXyIUc+Or4L/LmuE004VAXZTVFilRn8fbsvcD6lAHLWn1WEav7QZEVtyWyLLOMHYVIO5HYkbDVP9pXk0sd5wCA==
Received: from ary.qy ([IPv6:2001:470:1f07:1126:0:78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126:0:78:696d:6170]) with ESMTPS (TLS1.3 ECDHE-RSA CHACHA20-POLY1305 AEAD) via TCP6; 30 Apr 2026 15:17:35 -0000
Received: by ary.qy (Postfix, from userid 501) id 713371070B874; Thu, 30 Apr 2026 11:17:34 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1]) by ary.qy (Postfix) with ESMTP id BA4F31070B855; Thu, 30 Apr 2026 11:17:34 -0400 (EDT)
Date: Thu, 30 Apr 2026 11:17:34 -0400
Message-ID: <1f2f8749-5f7c-2d73-3fca-afc045d9ec6c@ietf.email>
From: John R Levine <johnl@ietf.email>
To: Richard Barnes <rlb@ipv.sx>
In-Reply-To: <CAL02cgRQqgcMCQuTcs9_84n7UO6zodhXEV-kckPj2LAX6LhE6A@mail.gmail.com>
References: <16e19e54-7f69-4ecc-a5f0-dcffd7a0d3b2@lear.ch> <CABcZeBP0e0TS4F_aQvvER+pt87rgGiARudKTEKzD0roEyESvZQ@mail.gmail.com> <8DC02587-26C8-428A-9D88-44AEEFDFE1C2@episteme.net> <CABcZeBMRsVsBnvbW_g0aR8M80RcQ0QWHqYxQk5dK_9-Dm1Tccw@mail.gmail.com> <20260430022538.CC3ED106EE3EA@ary.qy> <CABcZeBOOPf-Te7wGZV97sWf=XLW8_mTiZS0x30EfufB0Omr7hw@mail.gmail.com> <20260430030207.545AA106EF6A5@ary.qy> <b35ae5d5-fa7b-4734-8295-7773b9aa8bdc@betaapp.fastmail.com> <2890cc75-cba8-4caa-9692-9bb0ce944d06@lear.ch> <a1659fc4-73e3-43db-bc47-591a01d3fd0f@betaapp.fastmail.com> <afLnhUPxIw7eXe1q@ubby> <8B503162-B89C-4E3C-AF8E-3153970A6145@episteme.net> <253e846e-cc62-6df7-6f55-15adf739253e@ietf.email> <CAL02cgRQqgcMCQuTcs9_84n7UO6zodhXEV-kckPj2LAX6LhE6A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="utf-8"
Content-Transfer-Encoding: 8bit
Message-ID-Hash: 4PNBO4ATU4OUGJPNIRCBZSOKMVRRFSKY
X-Message-ID-Hash: 4PNBO4ATU4OUGJPNIRCBZSOKMVRRFSKY
X-MailFrom: johnl@ietf.email
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Pete Resnick <resnick@episteme.net>, last-call@ietf.org, emailcore@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Last-Call] Re: [Emailcore] Re: Re: draft-ietf-emailcore-as-28 ietf last call Secdir review
List-Id: IETF Last Calls <last-call.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/last-call/IacIP9C5TdZQznkw4m-0D64PIQg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/last-call>
List-Help: <mailto:last-call-request@ietf.org?subject=help>
List-Owner: <mailto:last-call-owner@ietf.org>
List-Post: <mailto:last-call@ietf.org>
List-Subscribe: <mailto:last-call-join@ietf.org>
List-Unsubscribe: <mailto:last-call-leave@ietf.org>

On Thu, 30 Apr 2026, Richard Barnes wrote:
> On Thu, Apr 30, 2026 at 10:48 AM John R Levine <johnl@ietf.email> wrote:
>> Unencrypted mail has been part of SMTP as long as
>> there has been SMTP,
>
> "Unencrypted HTTP has been part of HTTP as long as there has been HTTP."
>
> And yet we do not require that people continue to support it.

Really, mail is not the web.  As I said a few messages ago, every mail 
software maintainer and mail operator I have talked to agrees that they
still need unencrypted mail to talk to the long tail, to the extent that 
if we say otherwise they will just ignore us.

Why are we so determined to publish a spec that breaks decades of 
interoperation?  For that long tail, the alternative to unencrypted mail 
isn't encrypted mail, it's no mail.

R's,
John