Re: [Uta] Proposed list of deliverables

[Alexey Melnikov <[e-mail]>]

Hi,
This looks sensible, but I am trying to figure out how existing drafts 
fit into this plan.

On 18/01/2014 06:24, Orit Levin (LCA) wrote:
> Below is the list of deliverables for your consideration:
>
> 1. A threat analysis document containing a collection of known security breaches to application protocols due to poor use of TLS (Likely an Informational RFC)
> 2. Applications' independent document recommending best existing and future practices for using TLS (Likely a BCP or a Proposed Standard RFC)
> 3. A set of documents, each describing best existing and future practices for using TLS with a specific application protocol, i.e., SMTP, POP, IMAP, XMPP, HTTP 1.1, etc. (Case-by-case likely a BCP or a Proposed Standard RFC)
It sounds like the following 2 would cover this for SMTP/POP/IMAP:

http://datatracker.ietf.org/doc/draft-melnikov-email-tls-certs/
http://datatracker.ietf.org/doc/draft-moore-email-tls/

(Some pieces of draft-newman-email-deep might apply here as well).
> 4. A document discussing (and potentially defining) how to apply the opportunistic encryption approach (preliminary outlined in draft-farrelll-mpls-opportunistic-encrypt-00.txt) to TLS. (Category TBD)

There is a document defining this for email:
http://datatracker.ietf.org/doc/draft-newman-email-deep/

Last time I talked to Chris and Keith, they were planning to merge it 
with Keith's document:
http://datatracker.ietf.org/doc/draft-moore-email-tls/


I would like to confirm with WG chairs that the proposal above makes sense.

Best Regards,
Alexey
> Please, send your feedback to the list (including short +1s to indicate that the direction makes sense to you).
>
> Thanks,
> Leif and Orit - the chairs.