Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Michael Peddemors via mailop
Too early yet.. (to enforce globally) But start selectively forcing it for the bigger players known to support this.. On 2020-08-26 9:50 a.m., Scott Mutter via mailop wrote: How many mail operators out there are forcing outbound SMTP communications to use TLS?  Is this a common practice

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Anthony Purcell via mailop
Constant Contact sends mail. Not sure how that relates to their receiving practices. Have you looked into MTA-STS? It does not fulfill your desire, but gets you a lot closer. Log data should give you an idea of how much breakage you can expect with forcing TLS. Thanks,  > On Aug 26, 2020,

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Bill Cole via mailop
On 26 Aug 2020, at 12:50, Scott Mutter via mailop wrote: How many mail operators out there are forcing outbound SMTP communications to use TLS? Is this a common practice now? It is very uncommon. I know secure everything and TLS everywhere is a popular movement at this moment. It

[mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Scott Mutter via mailop
How many mail operators out there are forcing outbound SMTP communications to use TLS? Is this a common practice now? I know secure everything and TLS everywhere is a popular movement at this moment. I've noticed that Constant Contact (constantcontact.com - at least the mail server at

Re: [mailop] [E] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Marcel Becker via mailop
On Wed, Aug 26, 2020 at 9:59 AM Scott Mutter via mailop wrote: > > yahoo.com > > appears to handle STARTTLS but yahoo.co.jp >

[mailop] Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread flo via mailop
Hi there Have any of you had any bad experiences with Deutsche Telekom lately? They put one of my servers on their blacklist after an IP change with the reason that I have to provide an imprint on that machine. Have I missed something? Is this how it is done now? I have been running mail servers

Re: [mailop] Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread Felix Zielcke via mailop
Am Mittwoch, den 26.08.2020, 19:36 +0200 schrieb flo via mailop: > Hi there > > Have any of you had any bad experiences with Deutsche Telekom lately? > They put one of my servers on their blacklist after an IP change with > the reason that I have to provide an imprint on that machine. > Have I

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Mark Foster via mailop
I think the option of forcing TLS within a closed community is fine. I think the option of forcing TLS on the wide-wide-internet is a minefield for anyone who needs to communicate outside of a relatively closed network... because Email supports fall-back-to-plain-text by design, and it's hard to

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Jaroslaw Rafa via mailop
Dnia 26.08.2020 o godz. 11:50:01 Scott Mutter via mailop pisze: > I should note, forcing TLS is different from preferring TLS. I think a lot > of MTAs (at least Exim, I think?) prefer TLS and will attempt to negotiate > a STARTTLS session, but if that fails, then it will continue without TLS.

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Liam Fisher via mailop
Agreed - this is the road to escalations and suffering. On 8/26/2020 4:02 PM, Michael Orlitzky via mailop wrote: On 2020-08-26 12:50, Scott Mutter via mailop wrote: I've been toying with the idea of forcing outbound SMTP connections to use TLS, but thought I'd take a quick look and see who

Re: [mailop] Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread ml+mailop--- via mailop
On Wed, Aug 26, 2020, Michael Peddemors via mailop wrote: > There SHOULD be a URL associated with the domain ('mydomain.com') in the PTR.. Ah, the stuff you suggested on ietf-smtp and which got "rejected" by pretty one every one who replied? ___

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Michael Orlitzky via mailop
On 2020-08-26 12:50, Scott Mutter via mailop wrote: > I've been toying with the idea of forcing outbound SMTP connections to > use TLS, but thought I'd take a quick look and see who might miss mail > if this done. This sounds good at first but if you make a flow chart, all paths lead to either

[mailop] SNDS Request Access Problem

2020-08-26 Thread Thiago Rodrigo F. Rodrigues via mailop
Hello Mailop. I`m trying to register an IP range in SNDS but the request access page is not giving me the correct whois email for validation. SNDS are parsing emails from the comment section of the whois for the CERT.br ranges. Anyone had a similar issue recently ? Someone from MS could ping me

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Tim Bray via mailop
On 26/08/2020 21:33, Scott Mutter via mailop wrote: I just wanted to gauge what other mail server administrators were doing in regards to this.  The response is kind of what i expected, but the shift in wanting TLS and encryption on every connection, kind of made me question what the response

Re: [mailop] Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread ml+mailop--- via mailop
> But it was enough to have the imprint visible for them just for the Sorry for a stupid question: What is "the imprint"? Does that mean you have to operate a web server with an "Impressum" (I guess that's the German word?) if you want to send mail?

Re: [mailop] Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread Michael Peddemors via mailop
More and more companies are requiring transparency. mail.mydomain.com There SHOULD be a URL associated with the domain ('mydomain.com') in the PTR.. And that URL should reflect the organization that is responsible for activity related to that domain.. I will have to dig up that M3AAWG Nest

Re: [mailop] Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread Jaroslaw Rafa via mailop
Dnia 26.08.2020 o godz. 12:29:38 Michael Peddemors via mailop pisze: > There SHOULD be a URL associated with the domain ('mydomain.com') in > the PTR.. And that URL should reflect the organization that is > responsible for activity related to that domain.. No, it is a nonsense requirement. Mail

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

2020-08-26 Thread Scott Mutter via mailop
Well, I really just wanted to see what the rest of the community was doing in regards to this. Seems the resounding answer is a "prefer TLS, but don't disqualify if no TLS" or "opportunistic" TLS. However, experience has also taught me, if you don't force people to make changes then they're not

Re: [mailop] [EXTERNAL] Re: Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread Michael Wise via mailop
Shared infrastructure places ... like Office365 for instance, might find that problematic. Also, some senders prefer for security reason, either "Privacy" or fear of DDOS, to hide behind the Infrastructure of Others. Senders like Law Offices, certain corporations and such like. Now if

Re: [mailop] [EXTERNAL] SNDS Request Access Problem

2020-08-26 Thread Michael Wise via mailop
You’re going to have to chat with your upstream provider about that, otherwise anyone I could point in your direction is going to say pretty much the same thing: Go thru the support funnel. Aloha, Michael. -- Michael J Wise Microsoft Corporation| Spam Analysis "Your Spam Specimen Has Been

Re: [mailop] Deutsche Telekom rejects connections because of missing "provider identification"

2020-08-26 Thread Chris via mailop
On 2020-08-26 15:50, ml+mailop--- via mailop wrote: On Wed, Aug 26, 2020, Michael Peddemors via mailop wrote: There SHOULD be a URL associated with the domain ('mydomain.com') in the PTR.. Ah, the stuff you suggested on ietf-smtp and which got "rejected" by pretty one every one who replied?