Re: [Mailsec] [Extra] Advanced ("Modern & Secure") Email Authentication

[Steffen Nurpmeso <[e-mail]>]

Michael Peddemors wrote in
 <[e-mail]>:
 |Hi Michael,
 |
 |For the record, there is a new (relatively) mailing list that has low 
 |volume, but I might suggest that this discussion belongs on that list.
 |
 |"[e-mail]"
 |
 |It is a good topic for that list.  I heard about this initiative, and it 
 |seems interesting, and while I am still not convinced that utilizing our 
 |CLIENTID addition to the protocols belongs in some of the ideas..
 |
 |"The goal is to educate on the interplay between already existing
 |standards like Email SRV records (RFC 6186), OAUTH/OpenID autodiscovery
 |in SASL (RFC 7628), and expected authentication flows in the various.. "
 |
 |I do think it is an important topic, give the very real and present 
 |dangerous problems surrounding email authentication.

What a terrible sedition is that again, i wonder why that hate
speech always comes up again and again, and is allowed on public
lists.  While big players have not managed it to protect their
users by offering S/MIME or OpenPGP as part of their business,
still.  Really, i am so pi..ed by this, over and over again.
'Tell you what, i opened a PayPal account just a few weeks ago,
and i can tell you how easy it is when money is waving hello.

Luckily i have cold security on this box (Luks2), as well as warm
security (encfs on top, passwords in that PGP encrypted on top),
as well as hot security (slock on LID close, encfs umount on LID
close, ssh-agent key DB drop on LID close).

'Tell you what, i just wanted to get an OAuth verification for a
Unix console application, and it is just a chicanery.  You need to
create a youtube video to visualize things ... that this console
program just does not have!  I gave them a still frame like so

    #?0!0/NONE#|sn_gm:/var/spool/mail/steffen? File imap
  [I contact GMail]

    You need a passphrase to unlock the secret key for
    user: "Steffen Nurpmeso <[e-mail]>"
    4096-bit RSA key, ID A57802DD, created 2017-11-30 (main key ID 1883A0DD)
  [On the cold-security unlocked hard disk partition, on the
  cold/warm unlocked encrypted directory, there is a OpenPGP
  encrypted file where the passwords are stored.
  This file is unlocked here, the password comes from an agent
  running concurrently to the session you see]

    #?1!22/INVAL#|sn_gm:imaps://[e-mail]/INBOX?
  [We are now connected to GMail.  There is no mail]

So hey, support free projects which provide secure password
stores, i have heard you even donate a bit to keep TLS alive and
living!  Thank you!!  We have one major TLS, and a single major
PGP implementation on this earth -- thank you!!!!

Support standardized secure email containers.

Support refreshing of authentication tokens via normal TLS
transport, instead of requiring HTTPS that is HTTP 1.1 today, 1.2
tomorrow and 1.3 a day later.  Even omnipresent cURL that gets
a bit of donation i have heard slurps in support for 1.2 and 1.3
via external libraries because it is such a huge pile or work!
Even if there is relation in between the major head and QUIC, no?

Support EXTERNAL authentication, support CMS, support
authentication that interacts with security tokens.  Support live
refresh of certificates inside a TLS connection authenticated via
EXTERNAL.  Hey, support per-user server TLS certificates shipped
alongside the EXTERNAL certificate for the user, so that there is
a true and real point-to-point connection.

Or hey, create your own better-email that _you_ can make money
with?

All i want to use is my passport that comes from my country by the
way.

'Tell you what, i do not have any apps on the (used) smartphone
i have.  Hey, but do not ask me why.

And what do you mean with insecure?  My bank account uses
a four-digit PIN.  How secure is that???

Really.  You may feel cool when singing this sedition over and
over again, and it may bring you forward in your job.
Other than that .. really not.

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)