Re: [saag] IETF 93 Agenda Request - Key Discovery

[Viktor Dukhovni <[e-mail]>]

On Thu, Jul 23, 2015 at 03:15:49PM +0200, Phil Hunt wrote:

> > WebFinger requires email server operators to also deploy HTTP
> > WebFinger servers, or email servers to support an additional request
> > protocol.  Neither seems necessary.
> 
> I wonder of this is true (not wanting http) for those supporting the oauth
> sasl extension.

Firstly, SASL is for MUA to MSA, not MSA/MTA to MTA.  Lookups of
keys for recipients is at the receving end, not the sending end.

Even if some large email provideds do end up supporting oauth SASL
for various web services, it seems unlikely that they would do so
for email accounts, where federated authentication seems rather
out of place.  More typically, the email provider would also be
the primary identity provider.

I can see an easy path to add support for the addrquery draft in
Postfix.  The same cannot be said for WebFinger.

-- 
	Viktor.