Transport securizat al e-mailului (STARTTLS și DANE)

De ce

• "Opportunistic Security: Some Protection Most of the Time" de V. Dukhovni
• "New e-mail security protocols mandatory within government" de Marco Davids (SIDN)
• "The sad state of SMTP encryption" de Filippo Valsorda

Statistici de utilizare

• DANE trend graphs
• DANE statistics
• .nl statistics on DANE de SIDN Labs
• Google's statistics on STARTTLS

Informații de context

• How-to on 'DANE for SMTP' de Platforma olandeză pentru standarde de internet
• Wiki on 'DANE for SMTP'
• FAQ on e-mail security standards de SIDN
• Factsheet "Secure the connections of mail servers" de NCSC-NL
• "IT Security Guidelines for Transport Layer Security (TLS), v2.1" de NCSC-NL

Specificații

• RFC 3207: SMTP Service Extension for Secure SMTP over Transport Layer Security
• RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
• RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance