Re: [Uta] Require TLS=NO is very much needed

ned+uta@mrochek.com Fri, 17 November 2017 14:20 UTC

Return-Path: <ned+uta@mrochek.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5A42120727 for <uta@ietfa.amsl.com>; Fri, 17 Nov 2017 06:20:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mrochek.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uKftVqRV3QmZ for <uta@ietfa.amsl.com>; Fri, 17 Nov 2017 06:20:54 -0800 (PST)
Received: from mauve.mrochek.com (mauve.mrochek.com [68.183.62.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BF56126CB6 for <uta@ietf.org>; Fri, 17 Nov 2017 06:20:54 -0800 (PST)
Received: from dkim-sign.mauve.mrochek.com by mauve.mrochek.com (PMDF V6.1-1 #35243) id <01QLKSZBTR8W00MJHV@mauve.mrochek.com> for uta@ietf.org; Fri, 17 Nov 2017 06:15:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mrochek.com; s=mauve; t=1510928150; bh=QBcbBo96YM6NS/IT+ycNekQrjcqbib+whTQ8xlLoZMs=; h=From:Cc:Date:Subject:In-reply-to:References:To; b=l3JCF4uLfWDDYSQW2E7dsD8zi2R4hUkyxE0xoAykNAdE4fk5VZqxOGJpLz2loa+rW pzOj26+tbt96tVHNlsWw4T5vfh78r2mB01NkYu87zH2J1aJ20jnfUDkQYRbE6jDrQm ZNnBH8XqqmIQ0PyIXKv5OhcuIifZknARQqh8QmtY=
MIME-version: 1.0
Content-transfer-encoding: 7bit
Content-type: TEXT/PLAIN; CHARSET="us-ascii"
Received: from mauve.mrochek.com by mauve.mrochek.com (PMDF V6.1-1 #35243) id <01QLJV50XY9S00004G@mauve.mrochek.com> (original mail from NED@mauve.mrochek.com) for uta@ietf.org; Fri, 17 Nov 2017 06:15:49 -0800 (PST)
From: ned+uta@mrochek.com
Cc: uta@ietf.org
Message-id: <01QLKSZAKXVU00004G@mauve.mrochek.com>
Date: Fri, 17 Nov 2017 06:12:41 -0800
In-reply-to: "Your message dated Fri, 17 Nov 2017 02:01:42 -0500" <C32A1B3D-5560-4533-BE56-F48218F21BB6@dukhovni.org>
References: <32C4B825-C3D6-4C25-9C1D-BCF4354CA326@dukhovni.org> <ed552e3e-00ce-5329-f38b-f763feacc17c@sunet.se> <5A0E7D70.6060302@isode.com> <C32A1B3D-5560-4533-BE56-F48218F21BB6@dukhovni.org>
To: Viktor Dukhovni <ietf-dane@dukhovni.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/7EZVvzEyo8o7maRVVL3a0TlFdAM>
Subject: Re: [Uta] Require TLS=NO is very much needed
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Nov 2017 14:20:56 -0000

> The obstacle in the current draft was that  the "NO"
> case appeared to over-complicate the ESMTP extension,
> but it is now clear that the "NO" case need not use
> the "ESMTP" extension and should be carried exclusively
> via a header.  However, since the same TLS policy
> header is also needed for the "YES" case (but with
> a slightly different payload), the same draft should
> specify both.  We should not force these to be separate
> just to hurry the "YES" case out the door.  Let's do
> this right.

I'm with Viktor on this one. Having two documents where only one is
needed will not only create redundant material that needs to be kept
in sync, it's more stuff people implementing this have to read.

This is already too complicated and spread over too many specifications. Let's
please not make it more so.

				Ned