REPLY: 2:5030/1997@fidonet 5dfa0049   
   MSGID: 2:280/464.47@fidonet 5dfb222f   
   PID: GED+LNX 1.1.5-b20180707   
   CHRS: UTF-8 4   
   TZUTC: 0100   
   TID: CrashMail II/Linux 1.7   
    AF> I've already expressed my ideas, but here's a summary:   
      
    AF> 1. STARTTLS is the best option because:   
      
   How do you encrypt the metadata that is sent on connection? Can STARTTLS   
   negotiated before node infos are sent? Will this add another roundtrip?   
      
   Direct TLS will give us a quick path to QUIC, which would reduce connection   
   times instead of making the protocol slower.   
      
    AF> 2. For any kind of TLS something must be decided on certificate   
    AF> authority.   
      
   Or don't us a CA. There is DANE, TOFU and we still have the encrypted session   
   password for authentication ...   
      
    * Origin: kakistocracy (2:280/464.47)   
   SEEN-BY: 1/123 90/1 103/705 154/10 203/0 221/0 227/114 229/101 200   
   SEEN-BY: 229/354 426 1014 240/5832 249/307 317 280/464 5003 5555 292/854   
   SEEN-BY: 310/31 342/200 396/45 423/120 712/848 770/1 2452/250   
   PATH: 280/464 229/426