SMTP TLS Reporting does not specify retry for HTTPS POST rua

mrisher / smtp-sts

SMTP Strict Transport Security

Apache License 2.0

35 stars 19 forks source link

SMTP TLS Reporting does not specify retry for HTTPS POST rua #112

Closed eyeofthenico closed 7 years ago

eyeofthenico commented 7 years ago

While SMTP reporting would benefit from softfail retries, the HTTPS POST webhook does not specify retry behavior. In order to have some reliability, I think we suggest policy like exponential backoff and suggest a minimal number of retries.

abrotman commented 7 years ago

I mostly agree, though I'd probably just say that if it can't be delivered within 24hrs, drop the report. I guess I feel like if a receiver hasn't noticed that they aren't getting reports from anyone after 24hrs, they're probably not doing much with them anyway.

abrotman commented 7 years ago

https://github.com/mrisher/smtp-sts/blob/abrotman_1/mta-sts.md

danmarg commented 7 years ago

This was merged in, right? Reopen if I'm mistaken.