Re: QUIC vs. SMTP
Francesco Chemolli <kinkie@squid-cache.org> Fri, 27 February 2026 05:50 UTC
Return-Path: <gkinkie@gmail.com>
X-Original-To: quic@mail2.ietf.org
Delivered-To: quic@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DB9FCBF48D8C for <quic@mail2.ietf.org>; Thu, 26 Feb 2026 21:50:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.547
X-Spam-Level:
X-Spam-Status: No, score=-0.547 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WMlqxH4xzlox for <quic@mail2.ietf.org>; Thu, 26 Feb 2026 21:50:54 -0800 (PST)
Received: from mail-yx1-f46.google.com (mail-yx1-f46.google.com [74.125.224.46]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 642FEBF48D87 for <quic@ietf.org>; Thu, 26 Feb 2026 21:50:54 -0800 (PST)
Received: by mail-yx1-f46.google.com with SMTP id 956f58d0204a3-649d589ab0fso196642d50.2 for <quic@ietf.org>; Thu, 26 Feb 2026 21:50:54 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1772171448; cv=none; d=google.com; s=arc-20240605; b=Tt0rl/PnQP85mNmwprSh20KwyxkkNp7LaAbQp6zqdWMjfKSDJJpFFQJeusCGypWQGO EdHCZAtgjoeGbGv4e6ZMOAZdW6dcr7Qofx80p1GpwzM8QxzarW77y0S4gBX8ymK9qWHp spzBuykBOdPMmV7J+nna0/MfCHPnXtBDF8U0yGQSYXsw/73hURi821B8/ojLapr6TCeF 0GQVUadJTcUmICIP6ApjVBsaIMXIpkeVFNlohCvp6DYe52YG0xVnBVZ2y2lzM8pCvQe8 TLDlZN21IbVl55TGzd8PuBmW3Md1Mwpv/dUILjq0UT8IH+ujeuLYTGR2El21042FepY1 OQdg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version; bh=cnqoghrrsCGklmuhXZX5TQmu+/AlZk4A/a8NKytBQYc=; fh=caaAAZn2wqGxruZADK6PxTQNYXE0NtwmLyxmgy0/P5E=; b=aZ5fPPeostR72UrlJSR+knpjDNEa2w2U6wLPlaBOWSaIm2kh1983jRB8jNqit9/QGz 9wh37XEmkTNtgGVhsJW+J2pz6SvGq2HnExe92GpUDQoue87AwB3xPSXco8x9oW7zasZY MdnJd1tzb5ffVuPDMDbRjhcyFtdBbiHIUU2+b36/ZwvCXtiSWaNhlEFrt85Z60FS80BE DQlioXUInalqyupU9TPXaSMrkVUau8FFr9/kISFI/u+TuT06EmYTfwnkpTCmNIpKsC0W PyeiOpvnpxu271nuOb6GHvhgF7kR5F4AKVgYmtHa6s0knA1ceqo31gJTvi+UkfmpGppv 7tJg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1772171448; x=1772776248; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=cnqoghrrsCGklmuhXZX5TQmu+/AlZk4A/a8NKytBQYc=; b=OhCV88dXCUS4u2C0FuVTofcbD5STk4yriHBsDaFklpUeUvt5tm5md6KrtieQXw+B0v amDR9NkQvjnrO4wjL/eXXTqa4zFdskXjmrdC7D2yQ+2JZsM1JzUcQ1EQlCZ8+8ywceef tyHBpUOzrzI6qUQRVeWVBFlAOZalbbogmnwO9OiV7awhxBZEEGZDUT2hbY2mLniuY62l U4gc0yx3jOt5zia4cAnhdB7ujtjAS3UqkFAp2ZlSM5Aeg7PAmDDizvaqdAsPeO4Sjjdc VP4nDiELpymNkP2BXZFqX1QZKMSKZRMAVjp8DwcZvB1z3xYYb2g2ozPXojWiSc4IaC+7 6E/w==
X-Gm-Message-State: AOJu0YxbHI+JdTd32nh1C5tomcwOybV6113hIiyuzsRBBiRluzFS1NCi +Tbg+jEKXgXZwhsaT1PwphLGI7CbAAbQePDv0PItxzwIX2JOisGOO8xlkEu0cO00DreEvUkmj40 BndwDjTI5NQnWeyZSABUE0W89kXiVMG9MHdfPFxc=
X-Gm-Gg: ATEYQzylRTS0ulDgdn7QSCxh7sAwhnIpdAzt++plvXRHLpNcFc9utR45l2qn04TZwk1 LgDq2cm/EjpIFn7w35tadV5vnsEK5iC0Bnc27ST5N4qd0hCIViwET2aKwvZA9+zJ09D1UdYtcxV Clyqg09Y7+BrgZc4e7ldC+j0M7V3urWiwReX77SgGRWwAMJt1zkYDY/P+/50A56PEeqaOH/4Z+D wk6fbXmX19sBPb9nCbUaNj23lhC5ir5vUdMIwOyxcDKUfptvVp84cnXNR1aWYJXA2Ic/w1FhQzK IUcZYsw=
X-Received: by 2002:a05:690e:d58:b0:64a:f23b:e2f5 with SMTP id 956f58d0204a3-64cc2225282mr1274967d50.3.1772171447950; Thu, 26 Feb 2026 21:50:47 -0800 (PST)
MIME-Version: 1.0
References: <b2ad8b20-3dd0-10c6-745d-a54fc3856fb1@taugh.com> <E092359D-89BA-4CCC-B2CC-9D7708AC6CC2@gmail.com> <40428219-da8c-3a39-b70b-9ae6334c82f6@taugh.com> <7052e4ad-a8a5-42f4-85ad-2a7ea73072ef@redbarn.org> <1a397635-267c-8f8e-4f97-9567968a3969@taugh.com>
In-Reply-To: <1a397635-267c-8f8e-4f97-9567968a3969@taugh.com>
From: Francesco Chemolli <kinkie@squid-cache.org>
Date: Fri, 27 Feb 2026 12:50:36 +0700
X-Gm-Features: AaiRm53QZjeUT4Fv3lm_s7mAVLh-gd6OXaLD-eMDHkABdXc3Y3Zi6JcGpOGbpZw
Message-ID: <CA+Y8hcMAREL7GjhM9gjmVu9zUGLCZYZdmqAT0_fyrcqZTXn3+w@mail.gmail.com>
Subject: Re: QUIC vs. SMTP
To: quic@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: IHQOZ7JSYE32QLZ6P6QFUFQDICYUAGOZ
X-Message-ID-Hash: IHQOZ7JSYE32QLZ6P6QFUFQDICYUAGOZ
X-MailFrom: gkinkie@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-quic.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/t_YvnIGcICx1z8MDb-pqbbWG274>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Owner: <mailto:quic-owner@ietf.org>
List-Post: <mailto:quic@ietf.org>
List-Subscribe: <mailto:quic-join@ietf.org>
List-Unsubscribe: <mailto:quic-leave@ietf.org>
On Fri, Feb 27, 2026 at 12:27 AM John R Levine <johnl@taugh.com> wrote:
>
> > Starttls, in both SMTP and IMAP, can be mitm'd (injection of refusal). We should not be using them any more.
>
> Not for SMTP if you use MTA-STS or DANE TLSA.
>
> In any event, in SMTP the only alternative to STARTTLS is not to use
> STARTTLS, which I don't think anyone would say was an improvement.
There's also SMTP over implicit TLS , defined in section 3.3 of RFC
8314 - admittedly only a proposed standard, from 2018.
--
Francesco Chemolli
- QUIC vs. SMTP John R Levine
- Re: QUIC vs. SMTP John R Levine
- Re: QUIC vs. SMTP Martin Thomson
- Re: QUIC vs. SMTP Dan Wing
- Re: QUIC vs. SMTP John R Levine
- Re: QUIC vs. SMTP Paul Vixie
- Re: QUIC vs. SMTP John R Levine
- Re: QUIC vs. SMTP Francesco Chemolli
- Re: QUIC vs. SMTP Paul Vixie
- Re: QUIC vs. SMTP John R Levine
- Re: QUIC vs. SMTP Francesco Chemolli
- Re: QUIC vs. SMTP John Levine
- Re: QUIC vs. SMTP John Levine