On Fri, Nov 1, 2024, 9:33 AM Dave Crocker <dhc@xxxxxxxxxxxx> wrote:
On 11/1/2024 8:57 AM, Watson Ladd wrote:
> The document already says use PGP.
That isn't what it says.
Can we agree it suggests it to solve security issues? I can't read 7.1 any other way: what was intended?
> Why can't it also recommend STARTTLS with some discussion of when not to?
Because a serious introduction of that reference requires distinguishing
channel vs. object security, benefits and limitations of StartTLS over
alternatives, etc., etc., etc.
Sounds like security considerations for SMTP to me.
d/
--
Dave Crocker
Brandenburg InternetWorking
bbiw.net
mast:@dcrocker@mastodon.social
-- last-call mailing list -- last-call@xxxxxxxx To unsubscribe send an email to last-call-leave@xxxxxxxx
