Re: [Uri-review] Request to review the 'pops' URI scheme registration.

[Alexey Melnikov <[e-mail]>]

Hi Mykyta,

First of all, thanks for doing this draft (For the record: I've asked 
Mykyta to work on it.)

Mykyta Yevstifeyev wrote:

> 14.02.2011 12:46, Graham Klyne wrote:
>
>> I note that pops: defaults to port 110, the same as regular pop.  I 
>> therefore assume that the use of a secure channel is determined by a 
>> protocol interaction within the POP connection.
>
> That may be found in RFC 2595.

I think I agree with Graham here. Use of STLS with POP3 (on port 110) 
doesn't need a new URI scheme, because a POP3 client can always 
negotiate STLS, if it is advertised by the corresponding POP3 server. If 
use of STLS is mandatory, then it would be better to extend the existing 
pop:// URIs to require STLS (e.g. by extending <auth> ABNF production or 
one of its sub-productions).

What I think actually needs a new URI scheme is use of POP3 over TLS on 
a separate port 995. In such case the STLS command is not used and TLS 
negotiation starts immediately after connecting to the port 995. So this 
is similar to how "https" works.
For this variant of POP RFC 2595 is a wrong reference.

>> This leaves me wondering why a separate URI scheme is needed.  It may 
>> be that I'm missing something, but I'd think that at least the 
>> document needs to say a little more than it does about the 
>> relationship to pop: and the normal POP protocol.
>
> Thia is described in the aforementioned doc., that is referenced 
> normatively here.
>
>> I'd also point out that this is more than just "In accordance with 
>> RFC 4395" - it is a proposal for a standards-track protocol update - 
>> it's going to need more than review on this URI-review list to get 
>> published.
>
> I'll also ask for review possibly on MORG list.

IMHO, it is a wrong place for POP3 related discussions. There used to be 
a POP3 mailing list on imc.org, but I don't know how used it is now. 
apps-discuss is probably a better place for this discussion.

> Mykyta Yevstifeyev
>
>> #g
>> -- 
>>
>> Mykyta Yevstifeyev wrote:
>>
>>>    Hello,
>>>
>>> In accordance with RFC 4395, Section 5.2, I am writing to request 
>>> the review of the 'pops' URI scheme registration.  This scheme is 
>>> used to designate the access to POP3 mailboxes over TLS connection.
>>>
>>> You may find the appropriate draft here: 
>>> http://tools.ietf.org/html/draft-yevstifeyev-pops-uri-scheme-00
>>>
>>> Thank you fore your time,
>>> Mykyta Yevstifeyev
>>