Re: [Uta] Proposed list of deliverables

[Peter Saint-Andre <[e-mail]>]

On 1/20/14, 4:51 AM, Alexey Melnikov wrote:
> Hi,
> This looks sensible, but I am trying to figure out how existing drafts
> fit into this plan.
>
> On 18/01/2014 06:24, Orit Levin (LCA) wrote:
>> Below is the list of deliverables for your consideration:
>>
>> 1. A threat analysis document containing a collection of known
>> security breaches to application protocols due to poor use of TLS
>> (Likely an Informational RFC)
>> 2. Applications' independent document recommending best existing and
>> future practices for using TLS (Likely a BCP or a Proposed Standard RFC)
>> 3. A set of documents, each describing best existing and future
>> practices for using TLS with a specific application protocol, i.e.,
>> SMTP, POP, IMAP, XMPP, HTTP 1.1, etc. (Case-by-case likely a BCP or a
>> Proposed Standard RFC)
> It sounds like the following 2 would cover this for SMTP/POP/IMAP:
>
> http://datatracker.ietf.org/doc/draft-melnikov-email-tls-certs/
> http://datatracker.ietf.org/doc/draft-moore-email-tls/
>
> (Some pieces of draft-newman-email-deep might apply here as well).

Alexey, I'm curious about the status of those documents. Have the 
authors had a chance to discuss approaches to merging or harmonizing 
them to some extent?

Thanks!

Peter

-- 
Peter Saint-Andre
https://stpeter.im/