Re: SF.net SVN: tmda: [2165] trunk/tmda

Stephen Warren <[email protected]> writes:

>> Bugfix in SMTP mode that allows TLS and SMTP AUTH to be used together. TLS has 
>> to come first, before AUTH, or else you'd get this kind of error:
>> 
>> smtplib.SMTPException: SMTP AUTH extension not supported by server.
>
> Which SMTP server is this with?
>
> According to the RFC, as soon as STARTTLS is issued (and accepted), the
> server MUST forget/reset all knowledge of the client - HELO hostname
> parameter, AUTH status, etc.
>
> This implies to me that any reasonable server would allow the client to
> send AUTH, STARTTLS, AUTH again, since the STARTTLS would un-AUTH the
> client, so the signon sent by the server after STARTTLS should offer AUTH.

It's with Postfix. 

I see what you're saying, but for some reason before this change TLS
and AUTH wouldn't work together, and now they do. For the purposes of
TMDA, I don't see any problems with reversing their order in SMTP.py
like I did, do you?