Re: [Uta] Eric Rescorla's Yes on draft-ietf-uta-email-deep-09: (with COMMENT)

Keith Moore <moore@network-heretics.com> Fri, 27 October 2017 14:16 UTC

Return-Path: <moore@network-heretics.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6149713F573; Fri, 27 Oct 2017 07:16:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level:
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=messagingengine.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Xb4FKEVmZup; Fri, 27 Oct 2017 07:16:27 -0700 (PDT)
Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AB5C13F565; Fri, 27 Oct 2017 07:16:27 -0700 (PDT)
Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id C00AF20B5A; Fri, 27 Oct 2017 10:16:26 -0400 (EDT)
Received: from frontend2 ([10.202.2.161]) by compute6.internal (MEProxy); Fri, 27 Oct 2017 10:16:26 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=cKkkc5 OSj7ov6lgSM8grWsd2iBy2Uh78jLo4IeE+AVg=; b=FLklAj6j1+/yGBp7Cwy21g JQ71MS4Po4NQhfNpGX1nUHQYHRSzlCyi0ur1a2loL+14x2Plki4UBLi4ng6NAAiI mHwoM4eFY/JAjnHr3rUVPzzNA0CvjgosWUl86sNxvyMonRAQ75SQ+ZCsxKl2nUEA ELQO3G+Y7raHSCLfcjSegAmWnId+v65KaYeudCYjFIDTJ1Xr6RBdSKUBbfj+ogkt KkUcBkEj+ScEH1JYWUJbfaeRkhbIbO/s90+FECiQRzyikhHB+bndkr4C/3UF6XUu wLMJ/JcnPUmmhtYoObjhm2w4pLtIhqqvaTFO6THjSabhHBVZHq+fW0fyWBaYhOPQ ==
X-ME-Sender: <xms:uj_zWQwvJsD9xLqLPXDR5gzswtOt1zstOGuXH7loO-BKInmic8H0Eg>
Received: from [21.144.49.44] (66-87-153-44.pools.spcsdns.net [66.87.153.44]) by mail.messagingengine.com (Postfix) with ESMTPA id 6391324BF8; Fri, 27 Oct 2017 10:16:26 -0400 (EDT)
References: <150852235551.15416.1247335476327491501.idtracker@ietfa.amsl.com> <98fddd93-a0a8-efa3-ce2e-530449ae536c@network-heretics.com> <8B20BC5A-A60A-4A31-9345-E970B31BC2C3@oracle.com> <a67ef1d0-1637-fe48-9fb1-664ad8b3172d@network-heretics.com> <CABcZeBMWd2n3MpVzqf+WRjy9K5V9HqOVPDJaV+DwJ7z4wmtTfw@mail.gmail.com>
In-Reply-To: <CABcZeBMWd2n3MpVzqf+WRjy9K5V9HqOVPDJaV+DwJ7z4wmtTfw@mail.gmail.com>
Mime-Version: 1.0 (1.0)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="us-ascii"
Message-Id: <CD498530-EEEB-4F83-892B-F88060A2CCAC@network-heretics.com>
Cc: Chris Newman <chris.newman@oracle.com>, The IESG <iesg@ietf.org>, "draft-ietf-uta-email-deep@ietf.org" <draft-ietf-uta-email-deep@ietf.org>, "uta-chairs@ietf.org" <uta-chairs@ietf.org>, Leif Johansson <leifj@sunet.se>, "uta@ietf.org" <uta@ietf.org>
X-Mailer: iPhone Mail (12F70)
From: Keith Moore <moore@network-heretics.com>
Date: Fri, 27 Oct 2017 10:16:24 -0400
To: Eric Rescorla <ekr@rtfm.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/iMmOqORzENT4Sd0Bomb3fDN1x3E>
Subject: Re: [Uta] Eric Rescorla's Yes on draft-ietf-uta-email-deep-09: (with COMMENT)
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Oct 2017 14:16:28 -0000

> On Oct 27, 2017, at 7:48 AM, Eric Rescorla <ekr@rtfm.com> wrote:
> 
> The entire principle here is that (absent DNSSEC) TLS operates on what was fed into the client.

Could you elaborate a bit?  I feel like I'm missing some context.  

Thanks,

Keith