Re: RFC 3207 STARTTLS

[John C Klensin]

--On Friday, 24 October, 2008 17:22 +0100 Tony Finch
<[EMAIL PROTECTED]> wrote:

>...
> However I don't know how to address its weaknesses for
> inter-domain relaying via MX records. At the same time
> relaying is often much less vulnerable to active attack than
> message submission, so there seems to me to be less need for
> TLS in this situation. (I'd probably have a less sanguine
> point of view if I had lots of mail going through a dodgy
> shared hosting environment...)

Of course, this is another area in which a functional DNSSEC,
with signature verification by the SMTP clients, would make some
of us sleep a lot more soundly.  But that is not specifically a
TLS problem.

    john