On Sun, Mar 22, 2015 at 08:34:56PM +0000, Alexey Melnikov wrote:

> >     Should use of "_submission"
> >     SRVNAMES be inferred from the target port?
>
> No.

OK.

> >     Or enabled via
> >     per-destination configuration?
>
> I think direct host configuration must disable SRV lookups and checking for
> sRVName in certificates.

> This is the same as manually configuring an IMAP server in an email client:
> sRVName don't apply.

So SRVNAME does not apply when using submission/imap/pop with a
statically configured hostname?  Why not?  Or in any case, it was
not 100% clear to me from the draft that SRVNAME was not intended
to apply.

[ One might suppose that SRVNAME certs being more specific and
provide better security, even when the hostname is fixed. ]

-- 
        Viktor.

_______________________________________________
Uta mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/uta

Reply via email to