Internet Draft: SMTP Strict Transport Security
tools.ietf.org
Internet Draft: SMTP Strict Transport Security
1–10 of 104 posts
Re: Internet Draft: SMTP Strict Transport Security
#2Very interesting, seems like this would have potential to improve email transit security quite a bit. It is encouraging to see Google, Microsoft, Yahoo and Comcast in the authors, that would indicate that this has good chance of being applied to large portion of internet email.
Of course email at rest security remains an issue, but that another story.
Re: Internet Draft: SMTP Strict Transport Security
#3Finally!
Re: Internet Draft: SMTP Strict Transport Security
#4Those who have taken a close look, how comprehensive is this? Any risk of downgrade attacks, etc?
Re: Internet Draft: SMTP Strict Transport Security
#5Very interesting, seems like this would have potential to improve email transit security quite a bit. It is encouraging to see Google, Microsoft, Yahoo and Comcast in the authors, that would indicate that this has good chance of being applied to large portion of internet email. Of course email at rest security remains an issue, but that another story.
> encouraging to see Google, Microsoft, Yahoo and Comcast
For all intents and purposes this is most of the English speaking internet. If you swap Yahoo for Verizon and Apple you'd be pretty close.
So, yeah encouraging to get this standard applied, less so if you think it is good for the internet to offload an outsize share of control to 5-10 corporations.
Re: Internet Draft: SMTP Strict Transport Security
#6Very interesting, seems like this would have potential to improve email transit security quite a bit. It is encouraging to see Google, Microsoft, Yahoo and Comcast in the authors, that would indicate that this has good chance of being applied to large portion of internet email. Of course email at rest security remains an issue, but that another story.
> encouraging to see Google, Microsoft, Yahoo and Comcast For all intents and purposes this is most of the English speaking internet. If you swap Yahoo for Verizon and Apple you'd be pretty close. So, yeah encouraging to get this standard applied, less so if you think it is good for the internet to offload an outsize share of control to 5-10 corporations.
> less so if you think it is good for the internet to offload an outsize share of control to 5-10 corporations
That has already happened a long time ago, so lets try to make the best of the situation.
Re: Internet Draft: SMTP Strict Transport Security
#7do the same for the fucking DNS protocol, which is clear-text, it's the weapon of choice for all surveillance/censorship freaks and nobody cares about. And by 'nobody' I am not referring to actual random Joe users, but you - the fucking mastermind developers who create stuff that nobody cares about, hosted on .io domains just because it is cool and looks like some start-up that's about the be the next big thing.
Please fix the DNS crap and you will be remembered in the history of those who gave a damn about totally broken stuff.
Re: Internet Draft: SMTP Strict Transport Security
#8do the same for the fucking DNS protocol, which is clear-text, it's the weapon of choice for all surveillance/censorship freaks and nobody cares about. And by 'nobody' I am not referring to actual random Joe users, but you - the fucking mastermind developers who create stuff that nobody cares about, hosted on .io domains just because it is cool and looks like some start-up that's about the be the next big thing. Plea…
DNSCurve - https://en.wikipedia.org/wiki/DNSCurve
Re: Internet Draft: SMTP Strict Transport Security
#9Interesting to see the list of contributors from the various companies: Google, Inc, Yahoo!, Inc, Comcast, Inc, Microsoft, Inc, LinkedIn, 1&1 Mail & Media Development & Technology GmbH . One of my goals is to contribute to an RFC.
Re: Internet Draft: SMTP Strict Transport Security
#10Earlier quoted context omitted.
> encouraging to see Google, Microsoft, Yahoo and Comcast For all intents and purposes this is most of the English speaking internet. If you swap Yahoo for Verizon and Apple you'd be pretty close. So, yeah encouraging to get this standard applied, less so if you think it is good for the internet to offload an outsize share of control to 5-10 corporations.
> less so if you think it is good for the internet to offload an outsize share of control to 5-10 corporations That has already happened a long time ago, so lets try to make the best of the situation.
No.
If you are not willing to do anything significant about it, then at least push people not to trade simplicity and ease-of-use with blockchain short term to give the technoloigy a chance to diverge into numerous protocols and subsystems.