RE: draft-hoffman-smtp-tls: TLS vs STARTTLS

"Jeff Stephenson (Exchange)" <[email protected]> Wed, 27 May 1998 14:32:51 -0700
Newsgroups gmane.ietf.apps-tls
Message-ID <2FBF98FC7852CF11912A0000000000010793E968@DINO>
We at Microsoft definitely support this.  It also has the beneficial
side-effect of bringing the keyword into line with both the verb and the way
in which people refer to the feature.

-- jeff

-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Wednesday, May 27, 1998 2:05 PM

At the last IMC Mailconnect interoperability event, we found that
implementations of draft-hoffman-smtp-ssl-06.txt did not interoperate
with Exchange 5.5, which conforms to an earlier version of the draft. 
The changes to the draft were to fix a vulnerability to a
man-in-the-middle attack.

At the meeting, there was general consensus to fix this problem by
changing the name of the EHLO extension from "TLS" to "STARTTLS", so
that Exchange 5.5 and implementations of recent revisions of
draft-hoffman-smtp-ssl-06 do not try to negotiate TLS.

Assuming that consensus holds on the ietf-apps-tls mailing list, I would
like to request this change be made before the document is approved as a
Proposed Standard.