Re: [saag] IETF 93 Agenda Request - Key Discovery

[⌘ Matt Miller <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 7/23/15 3:26 PM, Viktor Dukhovni wrote:
> On Thu, Jul 23, 2015 at 03:15:49PM +0200, Phil Hunt wrote:
> 
>>> WebFinger requires email server operators to also deploy HTTP 
>>> WebFinger servers, or email servers to support an additional
>>> request protocol.  Neither seems necessary.
>> 
>> I wonder of this is true (not wanting http) for those supporting
>> the oauth sasl extension.
> 
> Firstly, SASL is for MUA to MSA, not MSA/MTA to MTA.  Lookups of 
> keys for recipients is at the receving end, not the sending end.
> 
> Even if some large email provideds do end up supporting oauth SASL 
> for various web services, it seems unlikely that they would do so 
> for email accounts, where federated authentication seems rather out
> of place.  More typically, the email provider would also be the
> primary identity provider.
> 
> I can see an easy path to add support for the addrquery draft in 
> Postfix.  The same cannot be said for WebFinger.
> 

I think key discovery will be used far far more by MUAs than MTAs or
MSAs.  All the MUAs I use today already do a fair amount over HTTPS;
the extra effort for WebFinger seems fairly trivial.


- -- 
- - m&m

Matt Miller < [e-mail] >
Cisco Systems, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJVsQGFAAoJEDWi+S0W7cO1V2AIALljGePNrPJHrlawbeUBhztJ
6Dig4yVogwtaTpSUsJwJdYH0hrvxOLEqm5ZZJMYpCN7aBT4FKMNoLAvtGbw/IXwG
4QJl2x7wTsxfl1X3bZRuUOlvqkr1enU5XIqrZIuu/paEXqkffblOzyzlpZFd55xn
b3ZiX7va8tS08OBUBQeHqwADJ9JAtAv2/y0JQ7oozU9Kq4JPZOIZ8R8M+nTMOXQn
I1lg5Dug7ViadQ0ejKXkNBbajjBZ9qnP3LVoUpR4OfzX/Hiip8UrMU/LU2k3JJ4e
JM3Ne/4di+vU5Bw3ZBQLuIPx72EHAk5YYZZeVRjpRhazXQP8YCDJPUH1LvLfwHs=
=F9rb
-----END PGP SIGNATURE-----