Re: [Uta] SMTP Over TLS on Port 26 - Implicit TLS Proposal

Viruthagiri Thirumavalavan <giri@dombox.org> Mon, 07 January 2019 08:19 UTC

Return-Path: <giri@dombox.org>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25B63130DE7 for <uta@ietfa.amsl.com>; Mon, 7 Jan 2019 00:19:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=dombox.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L1D-i3txieST for <uta@ietfa.amsl.com>; Mon, 7 Jan 2019 00:19:45 -0800 (PST)
Received: from mail-yw1-xc29.google.com (mail-yw1-xc29.google.com [IPv6:2607:f8b0:4864:20::c29]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACF04129B88 for <uta@ietf.org>; Mon, 7 Jan 2019 00:19:45 -0800 (PST)
Received: by mail-yw1-xc29.google.com with SMTP id p65so15732520ywe.0 for <uta@ietf.org>; Mon, 07 Jan 2019 00:19:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dombox.org; s=default; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=kN4+iC3v29eW0AO1pcku+v99eJlAr5iws37F5jhvyEE=; b=TW9L5g0Hx6cwMsn1rsO6q4nbiNoNMzpOvi1mjYRy6fnSf+HuJok/+OYDlrjvOLl4Nh UlN4Z91PMSLRN8KQXJgCbESwpM1NP6Zpa8YA84XdZH/EMXXI7V7ACb9KTOmhzohinMB+ qNvn/GE13gV7q3s8CVtu5eRGD+oYlxscnpdvX8/Nx3zQ2sVUGgRyrkXerfdLrkTe9Rw9 fvNi6EInmmEfNLXdbelPq+tyNBmG1eYnuCNSgsjYvVWVO/V27K05Q6NPqIfHowRa4f42 0VPK09deNeyAlUNO+0aQrCllcBqAOUxziOGGq1/TA89/ACUTdHmJ9VVmglFjt9eO5AcN 6ebQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=kN4+iC3v29eW0AO1pcku+v99eJlAr5iws37F5jhvyEE=; b=FuLYi0ux72yrSurnI9RP3mjkfpyTuMyZzaSBHzlqxvZ4Kh9zksgosEElBLHRZ7P2UF +mOAnrMBrZfJaukxliF5YE67hmQ9NueyKj8kQWkLOTBXock7tzfy4L/m5Pno4uetGoPs 9uz7A7a8GKht3uUYNNotH0DhBi2vDnU27PCK2t4yj8F808tWlVovy7wETCXMazQZQXGG Tkba+W2b4dWr3vCgN4KSQMqQIUpc5rb8Yz6kE7aFKxX/AOMDI5ETkRaLiBHV/8yRzur0 v0KBS18U9J5tuwoaqdexiDsiFR3IsDZIFKGAkraraBg2MhVxaFHofwDzEcfVE+Kh6ug0 2KjA==
X-Gm-Message-State: AA+aEWbnpvE5q5UsANnZ3Jv4b0bnSuGd4Mx9/k4WNtRuXejAVUqKicmS 8ynBb9PYMn1zmTaopd0i2ifSAiX0i7VrI+pcDwUudhHy7wo=
X-Google-Smtp-Source: AFSGD/W03gYJ6TEr0EsRXXSCtIHwXDYIMf1eXg08/zZjEhz0soDR2ASok1yKAKrLSuC/T38gMvcINxwjcR9mZiYoLCE=
X-Received: by 2002:a81:a054:: with SMTP id x81mr61133829ywg.293.1546849181626; Mon, 07 Jan 2019 00:19:41 -0800 (PST)
MIME-Version: 1.0
References: <CAOEezJTyEf+Sn9ZqQPue1DFUSoFO211YogJ6ufYJxswWzXk=_A@mail.gmail.com> <20190106010828.CC431200C5ED52@ary.qy> <CAOEezJShOYkmy8-E+8zG=CPXxrWNcxf8q8W8MnW-v1RT0FzEWw@mail.gmail.com> <123cecc0-aba2-9530-c0d9-b6437f295140@domblogger.net> <88fad90d-24b6-fe4d-5df8-bc294c4f6b33@bluepopcorn.net>
In-Reply-To: <88fad90d-24b6-fe4d-5df8-bc294c4f6b33@bluepopcorn.net>
From: Viruthagiri Thirumavalavan <giri@dombox.org>
Date: Mon, 07 Jan 2019 13:49:30 +0530
Message-ID: <CAOEezJS+T3pP-GqwJFeT=HGbOu1TkY6W0kyjP9_FcVsaJ=hw7A@mail.gmail.com>
To: uta@ietf.org
Content-Type: multipart/alternative; boundary="000000000000fe06af057ed9e3b1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/X1NAzfKk4QYQnPIC2vHz5kS0Yvs>
Subject: Re: [Uta] SMTP Over TLS on Port 26 - Implicit TLS Proposal
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Jan 2019 08:19:49 -0000

Hey all, revised my draft based on the feedback I received from this
thread.

Changelog:

* Added starttls only support.
* Provided test cases for IDN names.
* Included Jim Fenton's proposal in the related projects section.
* No port hardcoding. Removed 26pref and 26only options. Now MX hosts can
start with either "smtps-" or "starttls-" prefix
* Solution can be used along with STS and DANE

https://gist.github.com/mistergiri/a4c9a5f1c26fd7003ebc0652af95d314

Thanks


On Mon, Jan 7, 2019 at 1:50 AM Jim Fenton <fenton@bluepopcorn.net> wrote:

> On 1/5/19 7:05 PM, Alice Wonder wrote:
> > Well since SMTP is point to point, if you depend upon encryption you
> > need S/MIME or PGP and always will.
>
> Yes, and remember that S/MIME and PGP only encrypt the message body.
> There's still quite a bit of information in the message header and SMTP
> transaction that aren't covered.
>
> >
> > Also I seem to recall talk of an e-mail header clients can add that
> > tell a MTA not to forward it without encryption.
>
> That's REQUIRETLS, which does this with an SMTP option rather than a
> header field (there is also a header field for the opposite request, to
> ignore MTA-STS and DANE).
>
> https://datatracker.ietf.org/doc/draft-ietf-uta-smtp-require-tls/
>
> -Jim
>
>
> _______________________________________________
> Uta mailing list
> Uta@ietf.org
> https://www.ietf.org/mailman/listinfo/uta
>


-- 
Best Regards,

Viruthagiri Thirumavalavan
Dombox, Inc.