IETF Logo Mail Archive

Re: [Uta] NEWSFLASH: DANE TLSA records published for web.de!

Anders Berggren <anders@desh.se> Fri, 22 April 2016 23:40 UTC

Return-Path: <anders@desh.se>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BC8812DFD8 for <uta@ietfa.amsl.com>; Fri, 22 Apr 2016 16:40:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=desh-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l1JML9w988Wq for <uta@ietfa.amsl.com>; Fri, 22 Apr 2016 16:40:00 -0700 (PDT)
Received: from mail-lf0-x232.google.com (mail-lf0-x232.google.com [IPv6:2a00:1450:4010:c07::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C81AB12DDE0 for <uta@ietf.org>; Fri, 22 Apr 2016 16:39:59 -0700 (PDT)
Received: by mail-lf0-x232.google.com with SMTP id c126so87714188lfb.2 for <uta@ietf.org>; Fri, 22 Apr 2016 16:39:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=desh-se.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=PIznJGZoDNSaw4hQCG+VSwfMVZVvgbfFW+g8WaOsvEk=; b=Uhx84ghdZB2aHeNELLnZcYrhENhdmXpdpPrCY4WqgJmIIMhoREkN2WnrFc4FPqoO+V 0R2xa0ixHyEzcqL0mntEGLyUfNZ3SFLpFnu0Y7aIJt5Fl2834V9KsXNovWb2WBfcWSai IylPQYPMtIoEobYqRXIsBGvorXDKXlbMvdjuhKap/qjhs6sL4as3CD1BzIBOTV7FDFC4 UXw9IPDvUhQ/+SyECEy0eylOphi27mVJibnYjm/JCoeV8DS+vEGrvpTjTR8EFwMaewp1 CFZH1nbCAMvR1dce+lGoIO4i8TV8GCAS8dpAenRf9lDz+aEkxyHQX2XkOpwNZMMNmSZx 8jSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=PIznJGZoDNSaw4hQCG+VSwfMVZVvgbfFW+g8WaOsvEk=; b=f5tLzQwNW5zGD7a3Jj2opP1agTxsoG/LRe0Yq5VwWaCoiRWcK95VcPwJUCeAT8KSlP 4/o/AQ13MIkAa5DeM9ZguPw2d0deZukCa6lD5ijVfet1gD+uVhGokrKqg/f69fzu49RR ZlzEjbaGKqwIaOgVleg3LGXoQ5HilL01B/HbgeDqVCBPyDD+WT1XIwD7OHAgtBlv2g3Z r5S6qcvvn/bQp5kdEGCSlvcct22kQaZYhX9tPQOrBZvWEhXh2vKXKKP8DYxEOI3FaivY fuAThiolT//9RVOj4cSPMeKz4WRIByn1yehGPlPiRAG2P4V6CI465CUk+9/3mLSqi2mm Kdtw==
X-Gm-Message-State: AOPr4FUaAxspyf1SFbPQeQNISdiXc3ncisZy3lPUSE3CmECF/nN9+/bHrZbPM5I040mbPQ==
X-Received: by 10.25.83.199 with SMTP id h190mr4742458lfb.165.1461368397934; Fri, 22 Apr 2016 16:39:57 -0700 (PDT)
Received: from [192.0.2.41] ([212.37.18.194]) by smtp.gmail.com with ESMTPSA id kl1sm1555755lbc.35.2016.04.22.16.39.56 for <uta@ietf.org> (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 22 Apr 2016 16:39:57 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: Anders Berggren <anders@desh.se>
In-Reply-To: <20160421161734.GO26423@mournblade.imrryr.org>
Date: Sat, 23 Apr 2016 01:39:54 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <498F9DF9-6F79-4B2F-BD45-600AA63C9FE3@desh.se>
References: <20160414183856.GL26423@mournblade.imrryr.org> <20160421161734.GO26423@mournblade.imrryr.org>
To: uta@ietf.org
X-Mailer: Apple Mail (2.3124)
Archived-At: <http://mailarchive.ietf.org/arch/msg/uta/ngiUvU3Z1lRKMZvcI8oLFCvyj8k>
Subject: Re: [Uta] NEWSFLASH: DANE TLSA records published for web.de!
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Apr 2016 23:43:17 -0000

> On 21 Apr 2016, at 18:17, Viktor Dukhovni <ietf-dane@dukhovni.org> wrote:
> While the even larger Gmail, Outlook.com/Hotmail, Yahoo ... are
> not in the near term in a position to deploy DNSSEC, I expect that
> doing so is simpler for outlook.com, because this domain does not
> overlap with major web properties whose scale makes the transition
> considerably more difficult.  So it would be great to add Microsoft
> to the above list some time in 2017 (or sooner).

Am I correct in assuming that none of the very big (Gmail, et al) do DANE verification when sending email? Given that Google’s public DNS resolvers have supported DNSSEC since many years, I think it would make sense for Google to start delivering email with DANE, regardless of what they decide to do for inbound email.

> DANE for gmail.com is also plausible without impacting all of
> Google, but requires moving the MX hosts out of the present
> google.com.

The domain googlemail.com used to be part of the Google Apps MX. Speaking of which; it would also make DANE available to the millions of domains[1] using Google Apps, as a bonus.

[1] http://research.domaintools.com/statistics/mailservers/

v2.23.0 | Report a Bug | By Email