nanog mailing list archives

Re: Trivial change in Public Cert behaviour coming soon


From: "John R. Levine via NANOG" <nanog () lists nanog org>
Date: 23 May 2025 12:56:48 -0400

On Fri, 23 May 2025, Jay Acuna wrote:

Using a client TLS cert with SMTP is an option within the TLS
protocol, and some clients do.

No, that was a misreading of a decades old file in the sendmail distro.

As anyone who rus a mail server knows, in fact SMTP clients do not send certificates (not to be confused with submission, which is not SMTP, where a few systems do use privately signed client certs.)

I really wish this zombie argument would die. The people who run mail systems are not all stupid, and if client certs were useful, someone in the past 30 years would have tried using them.

R's,
John
_______________________________________________
NANOG mailing list https://lists.nanog.org/archives/list/nanog () lists nanog org/message/EBWBEGGIO4SKG6ZPZLF2L4QWEXMFNC2F/


Current thread: