Skip to content

Use EFF MTA-STS preload list #180

@foxcpp

Description

@foxcpp

https://starttls-everywhere.org/policy-list/

Ensures a second reference point for TLS-enabled MTAs, compensating the MTA-STS downgrade trade-off (see RFC 8461 10.2).

  • Embed initial list version in the code base
  • Implement list auto-updating with (possibly) verification of the PGP signature
  • Implement list lookups and other stuff
  • Publish all that as a non-internal library so chasquid people can get on train together with us and not duplicate any effort

References

Metadata

Metadata

Assignees

No one assigned

    Labels

    mta-outRelated to MSA or outgoing message processing part of MTA functionality.new featureNew feature.securityRelated to security measures.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions