Re: Last Call: SMTP Service Extension for Secure SMTP over TLS to Proposed Standard
Eric Rescorla <[email protected]> Mon, 09 Jul 2001 08:15:15 -0700
| Newsgroups | gmane.ietf.apps-tls |
|---|---|
| Message-ID | <[email protected]> |
> I guess I'm of the opinion that such knowledge must be explicitly configured > if MTAs are going to fail if it is not accurate - MTAs should not be making > guesses. Disallowing this sort of caching makes autodiscovery a losing strategy in any environment which includes active attack as part of its threat model. I suspect that we'll have to suck that up but we should do so conscious of the tradeoff. -Ekr