Re: [NNTP] Last Call: <draft-elie-nntp-tls-recom mendations-01.txt> (Use of Transport Layer Securit y (TLS) in the Network News Transfer Proto col (NNTP)) to Proposed Standard

Sabahattin Gucukoglu <[email protected]> Sat, 03 Dec 2016 15:13:20 +0000
Newsgroups gmane.ietf.nntp
Message-ID <[email protected]>
On 2 Dec 2016, at 22:13, Julien =C9LIE <[email protected]> wrote:
> Would the following wording suit you?
>=20
>  TCP port 563 is dedicated to NNTP over TLS, and registered in the
>  IANA Service Name and Transport Protocol Port Number Registry for
>  that usage.  NNTP implementations using TCP port 563 begin the TLS
>  negotiation immediately upon connection and then continue with the
>  initial steps of an NNTP session.  This use of strict TLS on a
>  separate port is the preferred way of using TLS with NNTP.
>=20
>  If a host wishes to offer separate servers for transit and reading
>  clients, TCP port 563 SHOULD be used for the reading server using
>  strict TLS.  Regarding the transit server, though TCP port 433 is
>  registered for NNSP (Network News Streaming Protocol), no dedicated
>  port is currently registered for NNSP over TLS.  If a transit server
>  offers strict TLS, it SHOULD either use TCP port 433 if it does not
>  accept connections without TLS, or another unused port of its choice
>  communicated to all its clients using strict TLS.

This is pretty neat, but I'd like to make the last point unambiguous, =
like this:

If a transit server offers strict TLS, it SHOULD use TCP port 433 if it =
does not accept connections without TLS, but can alternatively use =
another unused port of its choice.  In either case, the port used should =
be clearly communicated to the client as the port used for strict TLS, =
and specifically that no plain-text communication occurs before the TLS =
session is negotiated.

If you can make that clearer, be my guest. :)

Cheers,
Sabahattin=