News for hackers. Stuff that matters.

A comment on RFC 8314: Use of Transport Layer Security for Email Submission and Access. Parent comment

Re:RFC 8314: Use of Transport Layer Security for Email Submi... by e12e on Thursday February 01, 2018 @08:38AM (#16281727)
What does https do that's different from verifying the cert chain and matching the cn to the hostname? Is this about the ill-conceived cert-pinning that pretends distributing keys for every domain is a scalable alternative to certificate authorities and on-line revocation lists?
[ Parent | on HN ]
Re:RFC 8314: Use of Transport Layer Security for Email Submi... by noblethrasher on Thursday February 01, 2018 @11:16AM (#16282985)
An MTA-STS web server is also used for policy discovery, and the HTTPS requirement ensures that the policy is authentic.
[ Parent | on HN ]