[mailmaint] Re: autoconfig consensus points

Michel Le Bihan <michel@lebihan.pl> Wed, 29 July 2026 10:20 UTC

Return-Path: <michel@lebihan.pl>
X-Original-To: mailmaint@mail2.ietf.org
Delivered-To: mailmaint@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 117C21205FB38 for <mailmaint@mail2.ietf.org>; Wed, 29 Jul 2026 03:20:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1785320400; bh=xUHCSrR+n9MK5vvfbsFM9G1xCwrH11lFWFQBOthWAWs=; h=Date:From:To:Subject:In-Reply-To:References; b=lHhYSv/+RoJvWI4B9N8uu80Q0FK76eTPhOJKVKDpQ7VS6NGfQY3LrlHz/w9U8H39O /pM0E97Z7lyIsU2WxVyjbbSdYaGiZzbaWyMkp1F8my0eESvOz/Y00MsRkJtZ8uIfda KDqJyJIEHMpBwav2zhiBdH6qBudmf+Pd9n5AlVK0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=lebihan.pl
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CSdtybyxMxcP for <mailmaint@mail2.ietf.org>; Wed, 29 Jul 2026 03:19:59 -0700 (PDT)
Received: from lebihan.pl (lebihan.pl [146.59.80.63]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 664761205FA40 for <mailmaint@ietf.org>; Wed, 29 Jul 2026 03:19:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=lebihan.pl; s=mail; t=1785320387; bh=xUHCSrR+n9MK5vvfbsFM9G1xCwrH11lFWFQBOthWAWs=; h=Date:From:To:Subject:In-Reply-To:References:From; b=RxXfa9xSaTKeOdmTtVC0CE68VKOvNJx6LndiQkNy29CBReMPgEH1MBV1nTt+SijQ3 2rOzZXZ9/ramiYMett58eOZkT2NZdbSF7IABnll+ZjiyyXXkzSjYpwpsa3uOrjYoXR ScbpygFZoR9aeM+AhYbWsjY0+8ywxjuQGlMygwsQ=
Received: from ehlo.thunderbird.net (unknown [188.146.36.225]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by lebihan.pl (Postfix) with ESMTPSA id B9D8728DA3B for <mailmaint@ietf.org>; Wed, 29 Jul 2026 12:19:47 +0200 (CEST)
Date: Wed, 29 Jul 2026 12:18:44 +0200
From: Michel Le Bihan <michel@lebihan.pl>
To: mailmaint@ietf.org
User-Agent: K-9 Mail for Android
In-Reply-To: <166bad8c-9d64-414a-ad3b-40bc56472ac5@thunderbird.net>
References: <CAL0qLwaaXrEo3e9TA=tWFpgnn4f9Yzc=6cfboV8BAHFqbK_0Yw@mail.gmail.com> <a7d50b04-73f4-4304-b632-5fd990c51722@dogfoodapp.fastmail.com> <0C3EB18F-3189-47BA-AC9C-6C4F4CFADEB9@stalw.art> <166bad8c-9d64-414a-ad3b-40bc56472ac5@thunderbird.net>
Message-ID: <8659EACA-9762-4044-91B5-890C2D0FD9F7@lebihan.pl>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: HGYQQHVLLMZOUHAE2OYAJWCBZ5MB7IOV
X-Message-ID-Hash: HGYQQHVLLMZOUHAE2OYAJWCBZ5MB7IOV
X-MailFrom: michel@lebihan.pl
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [mailmaint] Re: autoconfig consensus points
List-Id: Mail Maintenance <mailmaint.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/mailmaint/Z3bPWNq9cz-ljASLABcLpxG2Abk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mailmaint>
List-Help: <mailto:mailmaint-request@ietf.org?subject=help>
List-Owner: <mailto:mailmaint-owner@ietf.org>
List-Post: <mailto:mailmaint@ietf.org>
List-Subscribe: <mailto:mailmaint-join@ietf.org>
List-Unsubscribe: <mailto:mailmaint-leave@ietf.org>

One thing worth noting: CIMD or DCR still don't tell a client which OAuth server to use for a given domain. Autoconfig or PACC would still be needed for that discovery step.

Michel Le Bihan

Dnia 29 lipca 2026 11:25:29 CEST, Brendan Abolivier <brendan=40thunderbird.net@dmarc.ietf.org> napisaƂ/a:
>Hi there! Long time reader, first time caller.
>
>On 29/07/2026 10:49, Mauro De Gennaro wrote:
>>> Given this, it should clearly match what Thunderbird does now, and not try to change it or add new things.
>> Thunderbird only supports OAuth against Gmail and a few other large mailbox providers because they have hardcoded the OAuth endpoints. They do not support automatic discovery of OAuth endpoints, and the last time I spoke with the TB developers, they were planning to support OAuth through PACC instead. I will ask them to confirm in the Matrix room.
>> I think the OAuth section should be removed from this document, as to my knowledge it has not been implemented in any clients or servers.
>
>As a Thunderbird developer, I'm not personally aware of current plans to support OAuth through PACC. We'll be looking into PACC support in Thunderbird at some point, but regarding automatic OAuth discovery specifically we're currently looking in the direction of DCR and CIMD. Though I'm open to adding PACC to that list.
>
>Cheers,
>Brendan
>