Re: mailfront on IPv6

"John R. Levine" <[email protected]> 30 Jun 2011 10:18:12 -0400
Newsgroups gmane.comp.sysutils.bgware
Message-ID <[email protected]>
> I would have to review my patches to see how this is handled now, but in
> practice it doesn't matter: all clients in the wild start TLS before they
> authenticate.

RFC 4954 suggests pretty strongly that you wouldn't want to do AUTH and 
then STARTTLS.  On the other hand, an entirely valid and occasionally 
useful way to use STARTTLS is for the client to present its own 
certificate in the TLS negotiation which the server uses to authenticate 
the client.  The STARTTLS patches for qmail-smtpd do that, and set 
RELAYCLIENT appropriately.

>>> The ability to add EHLO capabilities and new verbs?

That will be very handy when EAI comes along.  While you're at it, you'll 
want to handle extra parameters on MAIL FROM and (if you support them at 
all) EXPN and VRFY.

R's,
John