Re: New version of SMTP/TLS

I'd certainly be happier if you could perhaps leave out the final clause
(below - "it is not anticipated..."). That's making a lot of assumptions
which I for one don't entirely agree with, and is an opinion which is not
technically relevant to the draft. 

I think I wrote in an earlier message that yes, we need the MAIL FROM:
AUTH= parameter to pass along the original submittor identity, but each
point in the chain _could_ be authenticated to the next using either SASL
or TLS, doesn't matter. There are certain advantages to having TLS in the
chain, as one can tunnel across insecure network elements.


Paul Hoffman / IMC wrote:
> 
> >I disagree.  There's no way to know what authentication identity was used
> >by the initial submittor....
> >
> >Now this may be simply that we had different ideas of what "authenticated
> >delivery" means.
> 
> Yup, we had a disconnect. How about I add the following where I deleted yours:
> 
> This extension is not suitable for authenticating the author of an email message
> unless every hop in the delivery chain, including the submission to the first
> SMTP server, is authenticated; it is not anticipated that this scenario
> will see widespread deployment.
> 
> --Paul Hoffman, Director
> --Internet Mail Consortium

begin:          vcard
fn:             Mike Macgirvin
n:              Macgirvin;Mike
org:            Netscape Communications Corporation
adr:            Mail Stop MV029;;501 E. Middlefield Road;Mountain View;California;94043;USA
email;internet: [email protected]
title:          Postmaster General
tel;work:       (650) 937-3798
tel;home:       (650) 964-7340
note;quoted-printable:=0D=0A=
	<A HREF=3D"http://people.netscape.com/max/"><B>http://people.netscape.com=
	/max/</B></A>=0D=0A=
	<BR>=0D=0A=
	<FONT SIZE=3D+1 COLOR=3D"#FF0000">=0D=0A=
	Only <B>dead</B> fish &quot;go with the flow&quot;.=0D=0A=
	</FONT>
x-mozilla-cpt:  ;0
x-mozilla-html: TRUE
version:        2.1
end:            vcard