Transporte seguro de e-mail (STARTTLS e DANE)

Por quê?

• RFC 7435: Opportunistic Security: Some Protection Most of the Time, V. Dukhovni
• New e-mail security protocols mandatory within government, Marco Davids, SIDN
• The sad state of SMTP encryption, Filippo Valsorda

Estatísticas

• DNSSEC and DANE Deployment Statistics, DNSSEC-TOOLS.org
• DANE trend graph, GitHub, Baknu
• Criptografia de e-mail em trânsito, Google

Mais informações

• Winding Down the STARTTLS Everywhere Project, and the Future of Secure Email, Electronic Frontier Foundation
• How-to on DANE for SMTP, Internet Standards Platform
• Transport Layer Security (TLS) for Email, Internet Society
• What standard email security technologies are we testing?, EU Commission
• Wiki on DANE for SMTP, GitHub, Baknu
• Factsheet Secure the connections of mail servers, NCSC-NL
• IT Security Guidelines for Transport Layer Security (TLS) v2.1, NCSC-NL
• BSI TR-03108 Secure email transport, German Federal Office for Information Security
• NIST SPECIAL PUBLICATION 1800-6: Domain Name System-Based Electronic Mail Security, NIST

Especificações e diretrizes

• RFC 3207: SMTP Service Extension for Secure SMTP over Transport Layer Security
• RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
• RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance