Re: I-D ACTION:draft-hoffman-rfc2487bis-01.txt

Paul Hoffman / IMC <[email protected]> Tue, 10 Aug 1999 14:22:20 -0700
Newsgroups gmane.ietf.apps-tls
Message-ID <[email protected]>
At 12:45 PM 8/10/1999 -0700, Marc Shannon wrote:
>In section 6 (Usage Example), it shows that after TLS has been negotiated, the
>client re-sends the EHLO and the server then offers the STARTTLS extension.
>This is in violation of section 5.2 where it says that a server "MUST NOT
>return the TLS extension in response to an EHLO command received after a TLS
>handshake has completed."

The next version will fix this and show the lack of STARTTLS in the second 
round as follows:

    S: <waits for connection on TCP port 25>
    C: <opens connection>
    S: 220 mail.imc.org SMTP service ready
    C: EHLO mail.ietf.org
    S: 250-mail.imc.org offers a warm hug of welcome
    S: 250-8BITMIME
    S: 250-STARTTLS
    S: 250 DSN
    C: STARTTLS
    S: 220 Go ahead
    C: <starts TLS negotiation>
    C & S: <negotiate a TLS session>
    C & S: <check result of negotiation>
    C: EHLO mail.ietf.org
    S: 250-mail.imc.org touches your hand gently for a moment
    S: 250-8BITMIME
    S: 250 DSN
    . . .

Please let me know if you find other problems where the example doesn't 
match the words in the text, or anywhere else, of course.

--Paul Hoffman, Director
--Internet Mail Consortium