Am 19.05.20 um 10:10 schrieb Ivan Ristic:
> I've been hearing anecdotal evidence that email providers don't accept small
> values for the maximum policy age in MTA-STS, for example anything smaller
> than a day. I searched around and I found a few articles saying things to
> that effect, but
Am 26.09.18 um 18:52 schrieb rfc-edi...@rfc-editor.org:
> A new Request for Comments is now available in online RFC libraries.
>
>
> RFC 8461
>
> Title: SMTP MTA Strict Transport Security
> (MTA-STS)
> SMTP MTA Strict Transport Security (MTA
Am 30.09.18 um 09:15 schrieb Viktor Dukhovni:
>> On Sep 30, 2018, at 2:56 AM, Hanno Böck wrote:
>>
>>> Does that really mean I have to setup thousand+ virtual hosts
>>> https://mta-sts.domain1...1000.example? Or are there other strategies
>>> for hosting provider?
>>
>> This seems to be the one
Am 08.11.18 um 06:52 schrieb Valery Smyslov:
> [1] https://tools.ietf.org/html/draft-lvelvindron-tls-for-email
I've read the document. Makes sense and looks like not more then
s/TLSv1.1/TLSv1.2/
Andreas
___
Uta mailing list
Uta@ietf.org
https://www
Am 08.01.19 um 21:59 schrieb John R Levine:
> I have about 80 domains pointed at my mail server. I control the DNS for all
> of them but I can't see any reasonable way to make MTA-STS work.
>
> I can set up the TXT records easily enough, but it looks like I need an HTTPS
> server with 80 name
Am 08.01.19 um 21:59 schrieb John R Levine:
> Adding to the excitement, every domain has its own name for the mail server,
> e.g., for foo.com the mail server name is mx1.foo.com, all pointing at the
> same IP address.
Oh, just re-read that.
this makes it really hard. So you could only autom
Am 08.01.19 um 23:02 schrieb Grant Taylor:
> I'm not aware of anything else that provides the signal that MTA-STS provides.
Oh, it's DANE, as I understand it.
A DANE aware sender will not transmit a message if validation for a DANE aware
recipient domain fail.
And there are already some (uni
Am 09.01.19 um 17:34 schrieb John Levine:
> If you have to validate 80 names, and each validation works 98% of the
> time, validating all 80 alt names in a row only works 19% of the time.
> That's the scalability issue.
I run a webserver for > 1000 domains. Fully automated, with one guiding
pr
Hello,
reading RFC 8461 again and again I find not answer on "is there is a minimum
value?"
https://tools.ietf.org/html/rfc8461#section-3.2 say
"max_age": Max lifetime of the policy (plaintext non-negative
integer seconds, maximum value of 31557600). Well-behaved clients
SHOU
