On Thu, May 12, 2016 at 11:26:49AM -0700, Jim Fenton wrote:
> Incompetence will show up consistently and therefore can be detected by
> a considerably simpler mechanism: a testing site, like Qualys SSL Labs.
> I see that there is a checktls.com that does exactly this. Incompetent
> email operators will probably not implement reporting anyway.
>
This assumes that the operators of the receiving tests are bothering
to perform adequate tests. Many do not. This is an empirical
observation, not a guess.
Reporting of misconfiguration will be useful, as will use of every
available notification channel. In-band, out-of-band or both as
made available by the receiving system.
--
Viktor.
_______________________________________________
Uta mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/uta
