Re: [Uta] Require TLS=NO is very much needed

Jim Fenton <fenton@bluepopcorn.net> Fri, 17 November 2017 09:08 UTC

Return-Path: <fenton@bluepopcorn.net>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06147126CF6 for <uta@ietfa.amsl.com>; Fri, 17 Nov 2017 01:08:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=bluepopcorn.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H_qUSJvOh6po for <uta@ietfa.amsl.com>; Fri, 17 Nov 2017 01:08:28 -0800 (PST)
Received: from v2.bluepopcorn.net (v2.bluepopcorn.net [IPv6:2607:f2f8:a994::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98C771200CF for <uta@ietf.org>; Fri, 17 Nov 2017 01:08:28 -0800 (PST)
Received: from splunge.local (c-24-4-226-141.hsd1.ca.comcast.net [24.4.226.141]) (authenticated bits=0) by v2.bluepopcorn.net (8.14.4/8.14.4/Debian-8+deb8u2) with ESMTP id vAH98OHf011581 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for <uta@ietf.org>; Fri, 17 Nov 2017 01:08:27 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bluepopcorn.net; s=supersize; t=1510909708; bh=N796mzgqDrVBCugKg2Pzj87dtdfisggBLbd47PVCP+4=; h=Subject:To:References:From:Date:In-Reply-To; b=LoPId6IdU9KauLbUFwi88bp0Cw5cmHgS1AQ54Ab07CnVKqIvur2j3381GnVELjjR8 V4BXT9JfHXdTkkrVwHnv3Sekaev5T3B13xvk6ugCbPW/gRYmx9zlrAEfxz5fM6UAjl 1UPqX2g4zVWTapI6ZFjgmbe+f5WzXRCqe4Pj4x40=
To: uta@ietf.org
References: <32C4B825-C3D6-4C25-9C1D-BCF4354CA326@dukhovni.org> <ed552e3e-00ce-5329-f38b-f763feacc17c@sunet.se> <7FD24C09-99A6-4847-BCE7-4455F62188FC@dukhovni.org> <3be212da-54bf-faf4-baa6-efd05fb5cef0@mnt.se>
From: Jim Fenton <fenton@bluepopcorn.net>
Message-ID: <6138741a-51c8-67c6-f465-7f1beddd4a01@bluepopcorn.net>
Date: Fri, 17 Nov 2017 01:08:18 -0800
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <3be212da-54bf-faf4-baa6-efd05fb5cef0@mnt.se>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/NwzFnkOvG42ULDWuMD0PvRe8TCg>
Subject: Re: [Uta] Require TLS=NO is very much needed
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Nov 2017 09:08:30 -0000

On 11/16/17 7:06 PM, Leif Johansson wrote:
>
> On 2017-11-17 03:55, Viktor Dukhovni wrote:
>>
>>> On Nov 16, 2017, at 8:56 PM, Leif Johansson <leifj@sunet.se> wrote:
>>>
>>> The sense of the room in Singapore was that the semantics
>>> of REQUIRETLS=NO was sufficiently different from REQUIRETLS
>>> that it would be better to move it to a separate document.
>>> It was suggested that REQUIRETLS=NO might be better
>>> represented as a message header even.
>> The room was not populated by enough folks with deep operational
>> experience in email, especially operational experience with
>> email transport security policy.
> I will set this aside for now. I encourage everyone to express
> their opinions on this topic. Right now the consensus is not
> clear either way.

(as an individual, not document editor): As I mentioned in another
thread, I see REQUIRETLS and the "REQUIRETLS=NO" (but under a different
name, as a header field) as being different enough and implemented
independently of each other that the latter should be a separate draft.

-Jim