Re: [Uta] Benjamin Kaduk's Discuss on draft-ietf-uta-smtp-require-tls-07: (with DISCUSS and COMMENT)

"Alexey Melnikov" <aamelnikov@fastmail.fm> Thu, 21 February 2019 13:42 UTC

Return-Path: <aamelnikov@fastmail.fm>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07848130E67; Thu, 21 Feb 2019 05:42:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fastmail.fm header.b=X0I8otTc; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=uXbp28VU
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bpTYT6BDHttT; Thu, 21 Feb 2019 05:42:40 -0800 (PST)
Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D126A1279E6; Thu, 21 Feb 2019 05:42:39 -0800 (PST)
Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 6BCFB2206E; Thu, 21 Feb 2019 08:42:38 -0500 (EST)
Received: from imap1 ([10.202.2.51]) by compute7.internal (MEProxy); Thu, 21 Feb 2019 08:42:38 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.fm; h= message-id:in-reply-to:references:date:from:to:cc:subject :content-type; s=fm2; bh=kndp9ZDhEYUaDHAo/9Xb4ERN7m2wG52oIRI+Xud 9I74=; b=X0I8otTc4FNd8+LDh7Vwo2Qfo5k3ysWbf1zRyeFu6pjrvuZZ748R9ud msY03JBux3CDqG/uA1XFMvQfIbAyByrznpkK5UmywH2guP+uCDOXTiMWM17yRxe2 hUTqgFQk9GPqmgQ+mLsZ4ysq5VQPtmIVsPTM1ZNMUos9ENgabqjAbP5YsvMHt2ot 1ott0ldOdfl+ejvP1j57vwWHhpA+4hzzCZEK5wMxMrCZfZUwldczHxpYCdBMOCRC vslCwc8hNQot4km2Emvw25iXQ7isrb9Y7jskgzgpHVj7NFiXsZOAxK0M0qWGpCf3 4gLLICt05Uw90TzDKfCzoEYN5YJlMdw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:references:subject:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=kndp9ZDhEYUaDHAo/ 9Xb4ERN7m2wG52oIRI+Xud9I74=; b=uXbp28VUhH6vynZjuIzhHP66j8QD5yJsU OmE1DK7Q2Sw26v0e6KtP2ZiG64PzLMChHzgd7G+JfiRDquZhwG+zQ5teAN+BX0oI XKCqb6YRTXANI+cf5ENGvcJcUsAb8WjDYTzW5Rb1CTvCg8cI/l+YM5cNpt8Bulwq 8DUs3A7hOtISgBe/GRZXuFRNDBFviHUeCmT7EXgTNrpjwPI4y42YqhNmzrpVenQ5 VCJe1Np63YEvKWeGvEWfxA1SReBxbf7250AOZj1/F/J03CSkuPR5rs3B/LXimPGB EoxyYZqn7oDjQoGMlr3Fo3GFwNdXvakC0g0PJim5wUuYTrTT7mIxg==
X-ME-Sender: <xms:zapuXOa4DXfT_DiF1yg242jDmFPzRceuo_Il_egWJOdjk4PbXOdIng>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedutddrtdekgdehieculddtuddrgedtledrtddtmd cutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfhuthen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepofgfkfgjfhffhffvufgtsehttdertderreejnecuhfhrohhmpedftehlvgig vgihucfovghlnhhikhhovhdfuceorggrmhgvlhhnihhkohhvsehfrghsthhmrghilhdrfh hmqeenucfrrghrrghmpehmrghilhhfrhhomheprggrmhgvlhhnihhkohhvsehfrghsthhm rghilhdrfhhmnecuvehluhhsthgvrhfuihiivgeptd
X-ME-Proxy: <xmx:zapuXOGpqPqIu15dgavW-sDctEPrjGXR_66bP6TDjpUdx4cnayFmZw> <xmx:zapuXM1dynXJj3AImeohf41ZCEGz55ZKL10ljKyVLesPtglvwxep6g> <xmx:zapuXKwRMtR8ro7lERnk8p8VyE_YW-aDbJJmBXYrQjpfCxV4fMIN9Q> <xmx:zqpuXEhyxGNshwiXrlnmX1QJ-ixTQwCqIkeI2oa4v0OdLYFrr7M75Q>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id C2B10D4642; Thu, 21 Feb 2019 08:42:37 -0500 (EST)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.5-895-g0d23ba6-fmstable-20190213v1
X-Me-Personality: 21611513
Message-Id: <367f956a-d7bd-4a01-811f-6dc9c203a856@www.fastmail.com>
In-Reply-To: <20190221120239.GS69562@kduck.mit.edu>
References: <155072491254.20210.15187912705241578950.idtracker@ietfa.amsl.com> <3EF4E85D-6836-4A08-9638-82F88F28A5A3@fastmail.fm> <20190221120239.GS69562@kduck.mit.edu>
Date: Thu, 21 Feb 2019 08:42:16 -0500
From: Alexey Melnikov <aamelnikov@fastmail.fm>
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: The IESG <iesg@ietf.org>, uta@ietf.org, uta-chairs@ietf.org, Valery Smyslov <valery@smyslov.net>, draft-ietf-uta-smtp-require-tls@ietf.org
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/uRpTMLuh7kPKR06aRDBjUfiUtt4>
Subject: Re: [Uta] Benjamin Kaduk's Discuss on draft-ietf-uta-smtp-require-tls-07: (with DISCUSS and COMMENT)
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Feb 2019 13:42:42 -0000

Hi Benjamin,

On Thu, Feb 21, 2019, at 12:02 PM, Benjamin Kaduk wrote:
> On Thu, Feb 21, 2019 at 10:24:17AM +0000, Alexey Melnikov wrote:
> > Hi Benjamin,
> > A couple of comments on some of your DISCUSS points:
> > 
> > > On 21 Feb 2019, at 04:55, Benjamin Kaduk <kaduk@mit.edu> wrote:

 (snip)

> > > The "must chain forward to final delivery" property for the REQUIRETLS
> > > option seems to present some incremental deployment difficulties, in that
> > > it will be nigh-impossible to successfully deliver such a message until
> > > there is fairly significant deployment coverage.  E.g., if any major email
> > > hosting provider does not implement, then it will forever remain a niche
> > > technology.  What indication to we have that this technology can succeed as
> > > specified?
> > 
> > There are several SMTP extensions on Standards Track that have similar properties. IETF generally didn't require "prove that it gets deployed" for them. There are already some implementations (as per the write-up).
> 
> It's just surprising to see a "your message won't get sent if the whole
> path doesn't support this extension" behavior; this seems to require a
> critical mass of deployment before any major usage is possible.
> I don't object per se to specifying things like this, but it does make one
> wonder whether we should spend so much effort on things that may be of
> little use in practice.

There is a bit of Catch-22 here: we need this in an RFC to see if we want widespread use.

> > >  If we anticipate it becoming a part of the de facto core,
> > > mandatory, SMTP feature set, should we not indicate that by an Updates:
> > > relationship?
> > 
> > We haven't done this in the past even for widely deployed SMTP extensions. This is not a reason not to do this in the future, but I think starting with this extension would cause more confusion.
> 
> Perhaps this could be discussed on the call (which, sadly, I don't expect
> ot be on).  I recognize that it would be weird to start a precedent here,
> and of course if the intention is not that this extension become de facto
> part of core SMTP then my concern disappears.

I can add this topic to the informal telechat next week.

Best Regards,
Alexey