Hi all,
Title : Use of TLS for Email Submission and Access
Authors : Loganaden Velvindron
Stephen Farrell
Filename : draft-ietf-uta-tls-for-email-01.txt
Pages : 5
Date : 2019-03-07
Abstract:
This specification updates current recommendation for the use of
Transport Layer Security (TLS) protocol to provide confidentiality of
email between a Mail User Agent (MUA) and a Mail Submission Server or
Mail Access Server. This document updates RFC8314.
Instead of rewording all the sentences mentioning TLS 1.1 to now mention
TLS 1.2, why not say to follow the recommendations of BCP 195?
Example:
OLD
"As soon as practicable, MSPs currently supporting Secure Sockets
Layer (SSL) 2.x, SSL 3.0, or TLS 1.0 SHOULD transition their users to
TLS 1.1 or later and discontinue support for those earlier versions
of SSL and TLS."
NEW
"As soon as practicable, MSPs currently supporting Secure Sockets
Layer (SSL) or TLS versions that MUST NOT be negotiated per [BCP195]
recommendations SHOULD transition their users to a later TLS version
encouraged to be used by [BCP195] and discontinue support for those
earlier versions of SSL and TLS."
--
Julien ÉLIE
« Le rire est une chose sérieuse avec laquelle il ne faut pas
plaisanter. » (Raymond Devos)
_______________________________________________
Uta mailing list
Uta@ietf.org
https://www.ietf.org/mailman/listinfo/uta