Re: mailfront on IPv6
"John R. Levine" <[email protected]> 30 Jun 2011 10:18:12 -0400
| Newsgroups | gmane.comp.sysutils.bgware |
|---|---|
| Message-ID | <[email protected]> |
> I would have to review my patches to see how this is handled now, but in > practice it doesn't matter: all clients in the wild start TLS before they > authenticate. RFC 4954 suggests pretty strongly that you wouldn't want to do AUTH and then STARTTLS. On the other hand, an entirely valid and occasionally useful way to use STARTTLS is for the client to present its own certificate in the TLS negotiation which the server uses to authenticate the client. The STARTTLS patches for qmail-smtpd do that, and set RELAYCLIENT appropriately. >>> The ability to add EHLO capabilities and new verbs? That will be very handy when EAI comes along. While you're at it, you'll want to handle extra parameters on MAIL FROM and (if you support them at all) EXPN and VRFY. R's, John