Re: [Uta] I-D Action: draft-ietf-uta-email-deep-06.txt

Alexey Melnikov <alexey.melnikov@isode.com> Tue, 28 March 2017 04:20 UTC

Return-Path: <alexey.melnikov@isode.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CFE512922E for <uta@ietfa.amsl.com>; Mon, 27 Mar 2017 21:20:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level:
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FePYlPBagRd8 for <uta@ietfa.amsl.com>; Mon, 27 Mar 2017 21:20:45 -0700 (PDT)
Received: from statler.isode.com (Statler.isode.com [62.232.206.189]) by ietfa.amsl.com (Postfix) with ESMTP id C14FF126DED for <uta@ietf.org>; Mon, 27 Mar 2017 21:20:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1490674845; d=isode.com; s=june2016; i=@isode.com; bh=WGA2qdnixCjXkW+LZIyd0jiLxPBaXuk0jGIJ2sxwW5Q=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=UIbAz7dPg1hW8AnSXY8KW3wWDcEyTsf5mit2cFa1kyV2T1aEZ0X7LQ5DY/IbzPGHuaU0I3 4/t1Vctb0YhzJmTlIuWAh/7HTfhNnlDuFHoHmA++F21WiGZFPt9tK/9m+cIwUrlO1ex5cA b9CE1rWUyDk0JNGdaPvoNHXzuVyDXs8=;
Received: from [172.20.86.22] (50-203-222-3-static.hfc.comcastbusiness.net [50.203.222.3]) by statler.isode.com (submission channel) via TCP with ESMTPSA id <WNnknABO-w3t@statler.isode.com>; Tue, 28 Mar 2017 05:20:44 +0100
References: <148944539677.20433.7775400419388289046@ietfa.amsl.com>
To: uta@ietf.org
From: Alexey Melnikov <alexey.melnikov@isode.com>
Message-ID: <58D9E49A.7010709@isode.com>
Date: Tue, 28 Mar 2017 05:20:42 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0
In-Reply-To: <148944539677.20433.7775400419388289046@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/2EsxUJeo6_Vqd9sjixbrFv4qqBw>
Subject: Re: [Uta] I-D Action: draft-ietf-uta-email-deep-06.txt
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Mar 2017 04:20:47 -0000

Nit in the latest version:

12.6.  Advertisement of STS policies

   MSPs SHOULD advertise STS policies that include at least tls11, tls-

I think "tls11" was changed to "tls-version=1.1".

   cert and sts-url, with the latter having an associated https URL that
   can be used to inform clients of service outages or problems
   impacting client confidentiality.  Note that advertising tls-cert is
   a commitment to maintain and renew server certificates.  A MSP MAY
   also specifically indicate a commitment to support PKIX validation,
   DANE validation, or both, using tls-cert=pkix, tls-cert=dane, or tls-
   cert=pkix+dane, respectively.