> Il 8 gennaio 2019 alle 18.26 John Levine <[email protected]> ha scritto:
>
>
> In article <[email protected]> you write:
> >I think the community would welcome that, but figuring out what specific
> >timeline is plausible; getting affirmative buy-in; setting up adequate
> >testing and notice; etc, is the real work involved. It won't happen
> >just by wishing it.
>
> MTA-STS does a great deal of this. It has a way for a domain to say
> "all my inbound mail uses TLS" (RFC 8461) and for other systems to
> report back and say whether they're actually seeing that (RFC 8460.)
>
> I don't understand why people are trying to reinvent the wheel when we
> just defined a fairly round one a few months ago.
DANE and MTA-STS provide an evolutionary and backwards compatible path for the
transition to fully encrypted and authenticated email flows for those that
care, but cannot force anyone to care and deploy them. What we are discussing
is whether we could collectively exert gentle pressure (i.e. encrypt your email
by this date or you won't be allowed to communicate any more) so that even
those that don't care start to care.
Regards,
--
Vittorio Bertola | Head of Policy & Innovation, Open-Xchange
[email protected]
Office @ Via Treviso 12, 10144 Torino, Italy
_______________________________________________
Uta mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/uta
