Autor: Jeremy Harris Data: Para: exim-dev Assunto: Re: [exim-dev] [Bug 2594] CNAME handling can break TLS certificate
verification
On 09/06/2020 18:33, Viktor Dukhovni via Exim-dev wrote: > Perhaps so, but in the context of everything else in RFC6125, and the
> specs for other protocols, ... it is fairly clear (to me anyway) that
> the intent is to match the SMTP server name prior to CNAME expansion,
> just like the HTTP/IMAP/... cases.
Given that HTTP/IMAP don't do MX lookups, the argument-by-analogy
is dubious.
You could as easily use it to justify the first of my three options.
I'm not saying I think you've chosen then wrong thing, only that
the lawyering is weak.
--
Cheers,
Jeremy
