Ralph Seichter via Postfix-users wrote in
 <d6ny2ve2o420.3hrn1rq6f4...@ml.seichter.de>:
 |* Steffen Nurpmeso via Postfix-users:
 |
 |> there is this IETF draft which asks for support SMTPS (aka really,
 |> now), that is Implicit TLS via dedicated port for SMTP.
 |
 |Are you referring to [1], i.e. your own draft? "Nenne Ross und Reiter."

Well i think that became obvious from the rest of the message.

 |[1] https://datatracker.ietf.org/doc/draft-nurpmeso-smtp-tls-srv/02/
 |
 |> only one EHLO, no STARTTLS roundtrip.
 |
 |For the cost of an additional DNS lookup, plus the cost of setting up
 |the necessary RR, plus the cost for opening another firewall port. I see
 |only additional work and hassle, but neither gain nor advantage over the
 |existing STARTTLS. The way I percieve it, this attempt to get rid of
 |STARTTLS is a "solution" for an imaginary problem.

Nah, really not.  And it often is not additional, but only first
(and then, last).  And DNS entries have a TTL, so potentially many
(as in, a lot) messages pass without any further lookup.

We are talking about multiple roundtrips during a connection phase
were pipelining is not yet possible, and which are blocking thus.
This is anything but imaginary, .. also taking into account that
SMTP is the only of many email (and other) protocols for which it
is like that.

 |> Jeremy Harris of course said that it will not become part of the
 |> regular "codebase unless there is obvious community interest", and
 |> so i am asking whether postfix would be interested in this.
 |
 |I am not interested, but of course I don't speak for Postfix or the
 |community in general.

Fine.

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)
|
|In Fall and Winter, feel "The Dropbear Bard"s pint(er).
|
|The banded bear
|without a care,
|Banged on himself for e'er and e'er
|
|Farewell, dear collar bear
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to