Re: returning to the previous state

>I appreciate that the immediate concern is the swift deployment
>of SMTP/TLS rather than some obscure and currently theoretical
>application for one list-member, but if this is not the place to
>discuss an "application view" of TLS APIs, where is?

Well, I beleive that the TLS WG would be the better place because they
understand the vagaries of TLS better than we apps folk do. They also
understand what naive apps writers might ignore that would in fact lead to
disasterous security problems. On the other hand, we can probably come up
with a good set of requirements for them.

Either way, this comes down to a request for a TLS API, and the IETF is
notoriously bad at creating APIs.

--Paul E. Hoffman, Director
--Internet Mail Consortium