nanog mailing list archives

Re: SMTP Over TLS on Port 26 - Implicit TLS Proposal [Feedback Request]


From: valdis.kletnieks () vt edu
Date: Sat, 12 Jan 2019 00:03:18 -0500

On Sat, 12 Jan 2019 09:45:12 +0530, Viruthagiri Thirumavalavan said:

When I originally drafted the SMTPS proposal, I thought those plaint text
part before the STARTTLS command leaks some sensitive info.

So - given that multiple people have explained to you on the ietf-smtp list
that there's no really sensitive info before STARTTLS, what *exactly* does
your proposal buy us?  What *real* problem is port 26 fixing?

And is this something that *you* think is a problem, or that somebody who
runs an actual production mail system thinks is a problem?


Current thread: