-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On 12/06/13 12:29, Neil McGovern wrote: > On Wed, Jun 12, 2013 at 08:08:17AM +0200, Daniel Pocock wrote: >> On 12/06/13 00:02, Jeremy Stanley wrote: >>> On 2013-06-11 23:50:01 +0200 (+0200), Daniel Pocock wrote: >>>> Something that doesn't have these limitations: >>>> >>>> http://tools.ietf.org/html/rfc2487#section-7 >>> [...] >>> >>> That basically just makes the case for relying on (E)SMTP only >>> for transporting messages, but leveraging OpenPGP or S/MIME to >>> provide authentication and confidentiality where required (or >>> for anonymity, Mixmaster et al). >> >> >> OpenPGP and S/MIME don't guarantee anonymity as they don't (and >> can't really) encrypt the headers/envelope >> >> That is the type of `metadata' that allows a hostile party to >> start building a social graph of who knows who. Even if they >> can't see the contents of the communications, those social graphs >> are undesirable and an ideal solution would prevent that. >> > > Can I just check - have we really gone from a (far too long, IMO) > discussion on what default MTA we provide, to replacing SMTP? > Not quite, but SMTP encryption (and alternatives) are a relevant factor for many mail server users Whether it is relevant enough to the choice of default MTA is another question, but for me it is relevant, because if encryption/privacy is not there by default, then it is harder to get critical mass for (name your solution) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJRuK9oAAoJEOm1uwJp1aqDjUEP/0abkqtXdAgQyyBDr3dAYVEK GdKyNM/tRClVW7f6vxEYc6cClqhMHnP1LVXbZzPRkdnXXl88N0tY0Vl8M0wLCttC qIVG5m4Nna7tIQSfcjgNlJbUR7/2jfvLKC6ofonOTsDZMHtSQI902giOOUno8+/U JznCdDpjTmylgHPFhRR8E+6LZgrGPzmzmmQJ+Zs8FZmK3JbdDRpoct/iQiVBvzfT +jnsOpqZXZBAh3wvE4tK8XcX2Bxgc/MJtm65oTd1QRq7zzUqFoOhANfSMgcKuIe5 xF5OahMlnnMSDYWEqmr7urE5zk4vS551+eXMAPyB09DBqDAssE96uPyGse8zgnD4 /od6+ry+5b0YebHJYaKLxRw5kduFczjkdyCWqIoFWtvw0T7SKMmir8i6T986/PEJ SyqVvY+hKU6udfjCbhvVVWbYuFPFn/bG1cr09efC3z2tnRcS1gLDRFd0RWbmbvuZ ieAqK+5vCKCnJvQwjuy3uN/ZJKnNBC1gavwbcSL2tC5nN9lUI5m6Hv9tQomjHtZi 0OGcT7ff3LkIQi9vPTp6sgJaydiKwi80BA99R50LGAtGOWVspu/XUDmQ4gVq9V5B De92pQ2t041neNtReK/JMAjb7ZwYgibee40S+v4Di7ACPYjskc3Gj2xu5sSxip8H 5czvvEtRIm15lfUQuvi2 =N1IS -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/51b8af69.5050...@pocock.com.au
