search

mrisher / smtp-sts

SMTP Strict Transport Security
Apache License 2.0
35 stars 19 forks source link

TLSRPT: Success count should indicate what kind of authentication was used #117

Closed danmarg closed 7 years ago

danmarg commented 7 years ago

It seems to me that instead of just a "success count", we should have something like:

starttls-successes mta-sts-successes tlsa-successes

or similar. Otherwise, how is a recipient to know how many senders actually validated the cert or enforced encryption?

abrotman commented 7 years ago

Could that not be gleaned from the policy stanza? I can't imagine a sender would include a policy they don't intend to validate. I don't mind splitting it out, but I wonder if it is necessary.

abrotman commented 7 years ago

Okay, I think Dan and I are in agreement, going to close this