New version of draft-hoffman-smtp-tls

"Paul E. Hoffman" <[email protected]> Sun, 1 Jun 1997 15:05:58 -0700
Newsgroups gmane.ietf.apps-tls
Message-ID <v03102809afb7a23f8373@[165.227.249.100]>
Hi again. More discussions, more drafts. I've fixed the blunders I made on
the error codes. Further, after the extensive discussion going on in the
ASID WG about how they are going to handle LDAP over TLS, we discovered
that by ignoring SSL2, the STARTTLS command can be made simpler. The new
version is available at
<http://www.imc.org/draft-hoffman-smtp-tls>. It will appear in the Internet
Drafts directory soon, I assume. The differences from the -02 draft are:

C. Revision History

***Changes from -021 to -03:

Changed the TLS keyword and the STARTTLS command to not have any
parameters. The side-effect of this was to disallow SSL 2.0, which was
never documented in the IETF and is known to be much less secure than
SSL 3.0 or TLS 1.0. This also simplifies the protocol, always a
nice thing.

Changed the 554 response code to 454 because 4xx is for temporary
errors.

Changed the 560 response code to 505 because it was just plain dumb
to go into the x6x range. Added the enhanced error code as well.

Changed the example to show that the client starts the TLS
negotiation, and that the client speaks first aftwards.

--Paul E. Hoffman, Director
--Internet Mail Consortium