Re: New version of SMTP/TLS

>> Again, I disagree. SMTP/TLS is suitable for authenticated delivery of email.

> I disagree.  There's no way to know what authentication identity was used
> by the initial submittor.  Therefore the final receipient only knows
> whether or not the last hop was authenticated.  The SMTP AUTH extension,
> on the other hand, does provide for an authentication identity parameter
> on MAIL FROM.  This means there is an authentication identity associated
> with the message on final delivery, thus one can know who it really came
> from.  SMTP/TLS doesn't allow a distinction between last hop 
> authentication and valid authentication at every hop.


SMTP/TLS can authenticate the first (or any subsequent) hop, as could SASL.
SMTP AUTH (specifically the auth identity parameter to MAIL FROM) can pass
the originator info down the line, regardless of how each hop
authenticates.

begin:          vcard
fn:             Mike Macgirvin
n:              Macgirvin;Mike
org:            Netscape Communications Corporation
adr:            Mail Stop MV029;;501 E. Middlefield Road;Mountain View;California;94043;USA
email;internet: [email protected]
title:          Postmaster General
tel;work:       (650) 937-3798
tel;home:       (650) 964-7340
note;quoted-printable:=0D=0A=
	<A HREF=3D"http://people.netscape.com/max/"><B>http://people.netscape.com=
	/max/</B></A>=0D=0A=
	<BR>=0D=0A=
	<FONT SIZE=3D+1 COLOR=3D"#FF0000">=0D=0A=
	Only <B>dead</B> fish &quot;go with the flow&quot;.=0D=0A=
	</FONT>
x-mozilla-cpt:  ;0
x-mozilla-html: TRUE
version:        2.1
end:            vcard