New version of draft-hoffman-smtp-tls
"Paul E. Hoffman" <[email protected]> Sun, 1 Jun 1997 15:05:58 -0700
| Newsgroups | gmane.ietf.apps-tls |
|---|---|
| Message-ID | <v03102809afb7a23f8373@[165.227.249.100]> |
Hi again. More discussions, more drafts. I've fixed the blunders I made on the error codes. Further, after the extensive discussion going on in the ASID WG about how they are going to handle LDAP over TLS, we discovered that by ignoring SSL2, the STARTTLS command can be made simpler. The new version is available at <http://www.imc.org/draft-hoffman-smtp-tls>. It will appear in the Internet Drafts directory soon, I assume. The differences from the -02 draft are: C. Revision History ***Changes from -021 to -03: Changed the TLS keyword and the STARTTLS command to not have any parameters. The side-effect of this was to disallow SSL 2.0, which was never documented in the IETF and is known to be much less secure than SSL 3.0 or TLS 1.0. This also simplifies the protocol, always a nice thing. Changed the 554 response code to 454 because 4xx is for temporary errors. Changed the 560 response code to 505 because it was just plain dumb to go into the x6x range. Added the enhanced error code as well. Changed the example to show that the client starts the TLS negotiation, and that the client speaks first aftwards. --Paul E. Hoffman, Director --Internet Mail Consortium