On Sun, May 18, 2025 at 8:02 AM brent saner via NANOG <[email protected]> wrote: >Transports in SMTP do not authenticate, they identify (if at all).
Hi Brent, I'm unclear what distinction you're drawing between "identify" and "authenticate." "I am who I say I am," is the sum total of authentication. Everything beyond that gets into authorization. Which now that I think about it sounds a lot like there's a layer violation in giving TLS certificates a "for this purpose" tag at all. I knew there was a reason I didn't like it but I was having trouble putting my finger on it. Regards, Bill Herrin -- William Herrin [email protected] https://bill.herrin.us/ _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/JSL25WHJS7VTMKC6HD2CTBW6IN64XWFZ/
