Subj : Re: Re^2:  Re^4:  Directly include binary data in messages
To   : Rob Swindell
From : James Coyle
Date : Tue Mar 01 2022 05:53 pm

 RS> That's the case I was trying to make (along with all the other "prior
 RS> art" of insecure Internet protocols that have an alternate/secure port
 RS> for implicit TLS connections, e.g. telnets) - but they weren't buying it.

Sounds like you gave them really the only legs we had to stand on and it failed.  Thats a shame, but at least we know.

 RS> Yeah, we should do that. :-) I have a number of STARTTLS implementations
 RS> in Synchronet already (e.g. SMTPS, FTPS), so I don't expect it'd be much
 RS> different, thought I suppose this would be the first one I'd do in
 RS> JavaScript (since BinkIT is written in JS).

Yep it shouldn't be too difficult.  I also have it working for some protocols like POP3/SMTP in Mystic.  I don't think my FTP does it though so maybe I can look into that after this since it'd also probably benefit DoveNet security.

I have a document with an outline and some requirements/notes for TLS BINKP that I can e-mail you. It might save us a little time not having to reinvent the entire wheel, assuming you think its usable of course :)

Maybe once we agree on what we want to do and have it working then we can clean it up and circulate it or make a proposal or whatever?

Is there a preferred e-mail you like to use?  Or I could Netmail whatever works best.

.... The person who snores the loudest will fall asleep first

--- Mystic BBS v1.12 A48 2022/02/28 (Windows/64)
 * Origin: Sector 7 * Mystic WHQ (1:129/215)

.