1544211 - support SMTP MTA Strict Transport Security (MTA-STS) RFC 8461 and SMTP TLS Reporting RFC 8460 (SMTP-TLS)

Status: RESOLVED INVALID

(MailNews Core :: Networking: SMTP, enhancement)

Description

[Amir Farsi]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

Hello.
Today Gmail announced support of new email secuirity srtandards called MTA-STS and SMTP-TLS:
Look at gmail official bklog post: https://security.googleblog.com/2019/04/gmail-making-email-more-secure-with-mta.html

Actual results:

Thunderbird don't support these standartds

Expected results:

Thunderbird should asupport these standards

Comment 1

[Matt]

Is this a mail client issue? Based on the abstract at the beginning of each RFC which I have copied below. I see them as protocols for MTA's only. I do not see a role for Thunderbird as a MUA in these RFC's.

SMTP MTA Strict Transport Security (MTA-STS)(RFC 8461)
https://tools.ietf.org/html/rfc8461

SMTP MTA Strict Transport Security (MTA-STS) is a mechanism enabling mail service providers (SPs) to declare their ability to receive Transport Layer Security (TLS) secure SMTP connections and to specify whether sending SMTP servers should refuse to deliver to MX hosts that do not offer TLS with a trusted server certificate.

SMTP TLS Reporting (RFC 8460)
https://tools.ietf.org/html/rfc8460

A number of protocols exist for establishing encrypted channels between SMTP Mail Transfer Agents (MTAs), including STARTTLS, DNS-
Based Authentication of Named Entities (DANE) TLSA, and MTA Strict Transport Security (MTA-STS). These protocols can fail due to misconfiguration or active attack, leading to undelivered messages or delivery over unencrypted or unauthenticated channels. This document describes a reporting mechanism and format by which sending systems can share statistics and specific information about potential failures with recipient domains. Recipient domains can then use this information to both detect potential attacks and diagnose unintentional misconfigurations.

I would think this is probably a wonfix, or invalid.

Comment 2

[Jorg K (CEST = GMT+2)]

Hmm, looks like something for MTAs. Magnus, can you confirm, then close as INVALID.

Comment 3

[Magnus Melin [:mkmelin]]

Yeah nothing for Thunderbird to do here.