view Side-By-Side changes
SMTP D. Crocker Internet-Draft Brandenburg InternetWorking Intended status: Standards TrackFebruary 24,October 31, 2008 Expires:August 27, 2008May 4, 2009 Internet Mail Architecturedraft-crocker-email-arch-10draft-crocker-email-arch-11 Status of this Memo By submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she is aware have been or will be disclosed, and any of which he or she becomes aware will be disclosed, in accordance with Section 6 of BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire onAugust 27, 2008.May 4, 2009. Abstract Over its thirty-five yearhistoryhistory, Internet Mail hasundergone significant changeschanged significantly in scale and complexity, as it has become a global infrastructure service.The first standardized architecture for networked email specified little moreThese changes have been evolutionary, rather than revolutionary, reflecting asimple split between the user world and the transmission world. Core aspects of the service, such as the styles of mailbox address and basic message format, have remained remarkably constant. However today's Internet Mail is distinguished by many independent operators, many different components for providing servicestrong desire touserspreserve both its installed base andmany others for performing message transfer. Public discussion of the service often lacks common terminologyits usefulness. To collaborate productively on this large and complex system, all participants must work from a commonframeview ofreference for these componentsit andtheir activities. Havinguse a commonreference modellanguage to describe its components andCrocker Expires August 27, 2008 [Page 1] Internet-Draft EMail Architecture February 2008 terminology facilitates discussion about problems withtheservice, changesinteractions among them. But the many differences inpolicy, or enhancementperspective currently make it difficult to know exactly what another participant means. To serve as theservice's functionality. Thisnecessary common frame of reference, this documentoffers andescribes the enhanced Internet Mailarchitecture that targets description ofarchitecture, reflecting theexisting service, in order to facilitate clearer and more efficient technical, operations and policy discussions about email.current service. Crocker Expires May 4, 2009 [Page 1] Internet-Draft EMail Architecture October 2008 Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 1.1.BackgroundHistory . . . . . . . . . . . . . . . . . . . . . . . . . 3 1.2.Service Overview . . . . . . . . . . . . . . . . . . . . . 5 1.3.Document Conventions . . . . . . . . . . . . . . . . . . . 61.4. Changes to Previous Version . . . . . . . . . . . . . . . 62. Responsible Actor Roles . . . . . . . . . . . . . . . . . . .87 2.1. User Actors . . . . . . . . . . . . . . . . . . . . . . .97 2.2. Mail Handling Service (MHS) Actors . . . . . . . . . . . .1210 2.3. Administrative Actors . . . . . . . . . . . . . . . . . .1513 3. Identities . . . . . . . . . . . . . . . . . . . . . . . . . .1816 3.1. Mailbox . . . . . . . . . . . . . . . . . . . . . . . . .1816 3.2.Domain NamesScope of Email Address Use . . . . . . . . . . . . . . . . 17 3.3. Domain Names . . . . . . .19 3.3.. . . . . . . . . . . . . . . . 17 3.4. Message Identifier . . . . . . . . . . . . . . . . . . . .1918 4. Services and Standards . . . . . . . . . . . . . . . . . . . .2119 4.1. Message Data . . . . . . . . . . . . . . . . . . . . . . .2522 4.2. User-Level Services . . . . . . . . . . . . . . . . . . .3027 4.3. MHS-Level Services . . . . . . . . . . . . . . . . . . . .3229 4.4. Transition Modes . . . . . . . . . . . . . . . . . . . . . 33 4.5. Implementation and Operation . . . . . . . . . . . . . . . 33 5. Mediators . . . . . . . . . . . . . . . . . . . . . . . . . .3534 5.1.AliasingAlias . . . . . . . . . . . . . . . . . . . . . . . . .36. 35 5.2.Re-SendingReSender . . . . . . . . . . . . . . . . . . . . . . . .37. 36 5.3. Mailing Lists . . . . . . . . . . . . . . . . . . . . . .3937 5.4. Gateways . . . . . . . . . . . . . . . . . . . . . . . . .4039 5.5. Boundary Filter . . . . . . . . . . . . . . . . . . . . .4140 6. Considerations . . . . . . . . . . . . . . . . . . . . . . . .4240 6.1. Security Considerations . . . . . . . . . . . . . . . . .4240 6.2. IANA Considerations . . . . . . . . . . . . . . . . . . .4241 6.3. Internationalization . . . . . . . . . . . . . . . . . . . 41 7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 42 7.1. Normative . . . . . . . . . . . . . . . . . . . . . . . . 42 7.2. Informative . . . . . . . . . . . . . . . . . . . . . . . 44 Appendix A. Acknowledgements . . . . . . . . . . . . . . . . . . 45 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4546 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . .4748 Intellectual Property and Copyright Statements . . . . . . . . . .4849 Crocker ExpiresAugust 27, 2008May 4, 2009 [Page 2] Internet-Draft EMail ArchitectureFebruaryOctober 2008 1. Introduction Over its thirty-five yearhistoryhistory, Internet Mail hasundergone significant changeschanged significantly in scale and complexity, as it has become a global infrastructure service.TheThese changes have been evolutionary, rather than revolutionary, reflecting a strong desire to preserve both its installed baseof usersandutility.its usefulness. Today, Internet Mail is distinguished by many independent operators, many different components for providing service tousers andusers, as well as manyotherdifferent componentsfor performing message transfer.that transfer messages. Public collaboration onoperationsoperations, and policyactivities,activities of email, including thoserespondingthat respond to the challenges of email abuse, has broughtina much wider range of participantsthan email'sinto the technicalcommunity originally had. In order to do workcommunity. To collaborate productively ona large,this large and complex system,they need to share the sameall participants must work from a common view ofhowitis put together, as well as what terms toand use a common language torefer to the piecesdescribe its components andtheir activities. Otherwise,the interactions among them. But the many differences in perspective currently make itisdifficult to know exactly what another participant means. It is the need to resolve these differencesin each person's perspectivethat motivates this document,to describewhich describes the realities of the current system. Internetoperationsoperations, and policy work, and the discussions often are hindered by different models of email service design and different meanings for the same terms.This architecture document seeks to facilitate clearer and more efficient technical, operations and policy exchanges about email. ThisTo serve as the necessary common frame of reference, this documentoffers andescribes the enhanced Internet Mailarchitecture to reflectarchitecture, reflecting the current service.In particular it:The document focuses on: *DocumentsCapturing refinements to the email model *ClarifiesClarifying functional roles for the architectural components *ClarifiesClarifying identity-related issues, across the email service *DefinesDefining terminology for architectural components and their interactions 1.1.BackgroundHistory The first standardized architecture for networked email specified a simple split between the user world, in the form of Mail User Agents (MUA), and thetransmissiontransfer world, in the form of the Mail HandlingService (MHS) composed of Mail Transfer Agents (MTA).Crocker Expires May 4, 2009 [Page 3] Internet-Draft EMail Architecture October 2008 Service (MHS), which is composed of Mail Transfer Agents (MTA). The MHSis responsible for acceptingaccepts a message from one User anddeliveringdelivers itCrocker Expires August 27, 2008 [Page 3] Internet-Draft EMail Architecture February 2008to one or moreothers,other users, creating a virtual MUA-to-MUA exchange environment. As shown in Figure11, this defines two logical"layers"layers of interoperability. One is directly between Users. The other isbetweenamong theneighboring components,components along the transfer path. In addition, there is interoperability between the layers, first when a message is posted from the User to the MHS and later when it is delivered from the MHS to the User. The operational service hasevolved sub-divisions for each of these layers into more specialized modules. Coreevolved, although core aspects of the service, such as mailbox addressing and message format style,have remainedremaining remarkably constant.So theThe original distinction betweenuser-level concernsthe user level andtransfer-level concerns is retained,transfer level remains, but withan elaboration to each level of the architecture.elaborations in each. The term "Internet Mail" is used to refer to the entire collection of user and transfer components and services. For Internetdirectly resultingthat result fromitsa singletransitingtransit of the MHS. A common exception iswithgroup dialogue that ismediated viamediated, through amailing list, so thatMailing List; in this case, two postings occur before intendedrecipientsRecipients receive an Author's message, as discussed in Section2.1.4.2.1.3. Infactfact, some uses of email consider the entire emailservice --service, including Author andRecipient --Recipient, as a subordinate component. For theseservicesservices, "end-to-end" refers to points outsideofthe email service. Examples are voicemail over email[RFC3801],"[RFC3801], EDI over email [RFC1767] and facsimile over email [RFC4142]. Crocker ExpiresAugust 27, 2008May 4, 2009 [Page 4] Internet-Draft EMail ArchitectureFebruaryOctober 2008 +--------++---------------->|++================>| User |||| +--------+||| ^ +--------+||| +--------+ . | User+--+--------->|+==++=========>| User | .+--------+ |+---+----+ || +--------+ . .||| ^ . .||| +--------+ . . .+-->|++==>| User | . . . +--------+ . . . ^ . . . . . . V . . .+---+----------------+------+------+---++---+-----------------+------+------+---+ | . . . . | |+...............>+.................>. . . | | . . . | |+......................>+........................>. . | | . . | |+.............................>+...............................>. | | | | Mail Handling Service (MHS) |+--------------------------------------++---------------------------------------+ Figure 1: Basic Internet Mail Service Model1.2. Service OverviewEnd-to-end Internet Mail exchange is accomplished by using a standardized infrastructurecomprising:with these components and characteristics: * An email object * Global addressing * An asynchronous sequence of point-to-point transfer mechanisms * No prior arrangement betweenAuthorMTAs or between Authors andRecipientRecipients * No prior arrangement between point-to-point transferservices,services over the open Internet * No requirement forAuthor and RecipientAuthor, Originator, or Recipients to be online at the sametime.time Crocker ExpiresAugust 27, 2008May 4, 2009 [Page 5] Internet-Draft EMail ArchitectureFebruaryOctober 2008 The end-to-end portion of the service is the email object, called amessage. Broadly"message." Broadly, themessage, itself,message itself distinguishesbetweencontrolinformationinformation, for handling,versusfrom theauthor's messageAuthor's content. A precept to the design of mail over the open Internet is permitting user-to-user and MTA-to-MTA interoperabilityto take place with nowithout prior, direct arrangement between the independent administrative authorities responsible for handling a message.That is, allAll participants rely on having the core servicesbeinguniversally supported and accessible, either directly or throughgatewaysGateways thattranslateact as translators between Internet Mail and email environmentsthat conformconforming to other standards. Given the importance of spontaneity and serendipity inthe world of humaninterpersonal communications,this lack ofnot requiring such prearrangement between participants is a core benefit of Internet Mail and remains a core requirement for it. Within localized networks at the edge of the public Internet, prior administrative arrangement often is required and can include access control, routingconstraintsconstraints, and configuration of the information queryservice configuration. Inservice. Although recipient authentication has usually been required for message access since the beginning of Internet Mail, in recent yearsone change to local environments is an increased requirementit also has been required forauthentication or, at least, accountability.message submission. In thesecasescases, a serverperforms explicit validation ofvalidates the client'sidentity. 1.3.identity, whether by explicit security protocols or by implicit infrastructure queries to identify "local" participants. 1.2. Document ConventionsIn this document, referencesReferences to structured fields of a message use a two-part dotted notation. The first part cites the document that contains the specification for the field and the second is the name of the field. Hence <RFC2822.From> is the From: header field in an email content header and <RFC2821.MailFrom> is the address in the SMTP "Mail From" command.TheWhen occurring without the RFC2822 qualifier, header field names are shown with a colon suffix. For example, From:. References to labels for actors, functions or components have the first letter capitalized. Also, the key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119] [RFC2119]. Crocker Expires May 4, 2009 [Page 6] Internet-Draft EMail Architecture October 2008 RFC EDITOR: Remove the following paragraph before publication. Discussion venue: Please direct discussion about this document to the IETF-SMTP mailing list <http://www.imc.org/ietf-smtp>.1.4. Changes to Previous Version Crocker Expires August 27, 2008 [Page 6] Internet-Draft EMail Architecture February 2008 INSTRUCTIONS TO THE RFC EDITOR: Remove this sub-section prior to publication. Many small editing changes, for wordsmithing improvements2. Responsible Actor Roles Internet Mail is a highly distributed service, with a variety of actors playing different roles. These actors fall into three basic types: * User * Mail Handling Service (MHS) * ADministrative Management Domain (ADMD) Although related tomake details more consistent. This section documentsa technical architecture, thenature and basis for changes with significant impact. Originator->Author: The term "Originator" is used by RFC 2822 more broadlyfocus on actors concerns participant responsibilities, rather thanjust the From: field, which specifically defines who the authorfunctionality ofthe content is. I believe this distinguishes two constructs, one for the content author and one for the first agencymodules. For thathandles the message, in terms ofreason, thetransfer service. So the changelabels used are different from"Originator" to "Author" seems pretty straightforward. The challenge isthose used inusingclassic email architecture diagrams. 2.1. User Actors Users are theterm Originator, as defined in RFC 2822sources andapplying it to the system's architecture. Source->Originator: This change is moresinks ofa challenge. We need the "Originator" term and construct, but the architecture is already complex enough. Hence, adding a new construct seems like a very poor resolution. The document has used "Source" asmessages. Users can be people, organizations, or processes. They can have anMHS term forexchange that iterates, and they can expand or contract theMSAset offunctions. While one could argue against re-labeling it as Originator, I believe this is a reasonable choice and likely to be comfortable for community use, since "Source" does not have an established history. Bounce->Return: 'bounce address' is not accurate, because the address is used for more than that, but it *is* as established term within portions of the broader email community. I also believe the extensive discussion on this point, last year, justifies the change. The problem with saying "Bounce" is that is not merely linguistically impure, it is plain wrong and has already caused serious problems. Witness SPF. Frankly, we need to fix RFC2821, but that's a separate battle to fight and not one for this forum. Although not a verbatim use of "Reverse Path", the related termusers thatseems to work publicly is "Return Address". It is already establishedparticipate inthe bricks-and-mortar postal world and seems to have some acceptance within parts of the email community. (I've doneadraft white paper on authentication for the Messaging Anti- Abuse Working Group and the membership had some debate about this vocabulary choice and converged on agreeing to it.) Crocker Expires August 27, 2008 [Page 7] Internet-Draft EMail Architecture February 2008 Is the envelope part of the message? I don't remember whether we resolved this. For a varietyset ofreasons, I believe the message includes its envelope, and am encouraged to find RFC2822upd says:exchanges. Inthe context of electronic mail, messages are viewed as having an envelope and contents. The envelope contains whatever information is needed to accomplish transmission and delivery. (See [I-D.klensin-rfc2821bis] (Klensin, J., "Simple Mail Transfer Protocol," November 2007.) for a discussion of the envelope.) The contents comprise the object to be delivered to the recipient. This specification applies only to the format and some of the semantics of message contents. rfc2821bis says: SMTP transports a mail object. A mail object contains an envelope and content. I think these justify having the term 'message' as including the object. Examples of 'new' messages: Section Section 3.3.1contains a list of examples, discussing scenarios that might or might not be viewed as creating a "new" message, rather than retaining an existing one. The list has been expanded. 2. Responsible Actor RolesInternetMail is a highly distributed service, with a varietyMail, there are four types ofactors serving different roles. These divide into 3 basic types:Users: *UserAuthors *Mail Handling Service (MHS)Recipients *ADministrative Management Domain (ADMD) Although related to a technical architecture,Return Handlers * Mediators Figure 2 shows thefocus on Actors concerns participant responsibilities, rather than on functionalityprimary and secondary flows ofmodules. Hence the labels used are different than for classic email architecture diagrams.messages among them. Crocker ExpiresAugust 27, 2008May 4, 2009 [Page8]7] Internet-Draft EMail ArchitectureFebruaryOctober 20082.1.++==========++ || Author ||<..................................<.. ++=++=++=++=++ . || || || ++===========++ . || || ++====>|| Recipient || . || || ++=====+=====++ . || || . . || || ..........................>.+ || || . || || ................... . || || . . . || || V . . || || +-----------+ ++=====+=====++ . || ++========>| Mediator +===>|| Recipient || . || +-----+-----+ ++=====+=====++ . || . . . || ..................+.......>.+ || . || ..............+.................. . || . . . . \/ V V ' . +-----------+ +-----------+ ++=====+=====++ . | Mediator +===>| Mediator +===>|| Recipient || . +-----+-----+ +-----+-----+ ++=====+=====++ . . . . . .................+.................+.......>.. Figure 2: Relationships Among User ActorsUsers are the sources and sinks of messages. They can be humans, organizations or processes. They can have an exchange that iterates and they can expand or contract the set of users participating in a set of exchanges. In Internet Mail there are three types of user- level Actors: * Authors * Recipients * MediatorsFrom theUser-level perspectiveuser perspective, all mail transfer activities are performed by a monolithic Mail Handling Service (MHS), even though the actual service can be provided by many independent organizations. Users are customers of this unified service.Crocker Expires August 27, 2008 [Page 9] Internet-Draft EMail Architecture February 2008 The following figure depictsWhenever any MHS actor sends information to back to an Author or Originator in theflowsequence ofmessages among Actors: +------------+ | |<---------------------------+ | Author |<----------------+ | | |<----+ | | +-+---+----+-+ | | | | | | | | | | | V | | | | | +---------+-+ | | | | | Recipient | | | | | +-----------+ | | | | | | | | +--------+ | | | | | | | | | V V | | | | +-----------+ +-+-------+-+ | | | Mediator +--->| Recipient | | | +-----------+ +-----------+ | | | | +-----------------------------+ | | | +----------+ | | | | | | | | V V V | | | +-----------+ +-----------+ +---+-+-+---+ | Mediator +--->| Mediator +--->| Recipient | +-----------+ +-----------+ +-----------+ Figure 2: Relationships Among User Actorshandling a message, that actor is a User. 2.1.1. AuthorThisThe Author isthe user-level participantresponsible for creating the message, itscontentscontents, and its list of recipient addresses. The MHSoperates to send and deliver mail among Authorstransfers the message from the Author andRecipients. As described below,delivers it to the Recipients. The MHS hasa "Source"an Originator role (Section 2.2.1) that correlates with theuser-levelAuthor role. Crocker Expires May 4, 2009 [Page 8] Internet-Draft EMail Architecture October 2008 2.1.2. Recipient The Recipient is a consumer ofdelivered message content. As described below,the delivered message. The MHS has a"Dest[ination]"Receiver rolethat correlates(Section 2.2.4)correlates with theuser-levelRecipient role.AThis is labeled Recv in Figure 3. Any Recipient can close theuser-leveluser communication loop by creating and submitting a new message that replies toanthe Author. An example of an automated form of reply is the Message Disposition Notification (MDN), which informs the Author about the Recipient's handling of theCrocker Expires August 27, 2008 [Page 10] Internet-Draft EMail Architecture February 2008message. (See Section 4.1.)2.1.3. Return HandlerThe ReturnHandler --Handler, also called "BounceHandler" --Handler," receives and services notificationsgenerated bythat theMHS,MHS generates, asa result of efforts to transferit transfers ordeliverdelivers the message.NoticesThese notices can be about failures or completions and are sent to an address that is specified by theSource.Originator<<initial def>> . This Return handling address (also known as a Return address) might have no visible characteristics in common with the address of the Author orSource. 2.1.4.Originator. 2.1.3. Mediator A Mediator receives, aggregates,reformulatesreformulates, and redistributes messagesas part of a potentially-protracted, higher-level exchangeamongUsers. It is easy to confuse this user-levelAuthors and Recipients who are the principals in protracted exchanges. This activity is easily confused with the underlying MHS transfer exchanges.However they serveHowever, each serves very different purposes andoperateoperates in very different ways.Mediators are considered extensively in Section 5.When mail is delivered toa receiving mediatorthe Mediator specified in the RFC2821.RcptTo command, the MHS handles it the same way as for any other Recipient.That is, theThe MHSonlysees each posting and delivery activity between sources and sinksandas independent; it does not see(later)subsequent re-posting as a continuation of a process.HenceBecause the Mediator originates messages, it can receive replies. Hence, when submitting messages, the Mediator is an Author. So a Mediator really is a full- fledged User. Mediators are considered extensively in Section 5. The distinctive aspects of a Mediatorare, therefore, aboveare outside the MHS. A Mediator preserves the Author information of the message itreformulates, but mayreformulates and is permitted to make meaningful changes to thecontent. Hence themessage content or envelope. The MHS sees a new message, butUsersusers receive a message thatis interpretedthey interpret asprimarilybeingfrom -- or,from, or atleast,least initiatedby --by, theauthorAuthor of the original message. The role of a Mediatorpermits distinct, active creativity, rather than beingis not limited tothe more constrained job ofmerely connectingtogetherotherparticipants. Hence it is reallyparticipants; the Mediatorthatis responsible for the new message. A Mediator'stask can berole is complex and contingent,such asfor example, modifying and adding content or regulating which users are allowed to Crocker Expires May 4, 2009 [Page 9] Internet-Draft EMail Architecture October 2008 participate and when. Thepopularcommon example of this role is a groupmailing list. AMailing List. In a more complex use, a sequence of Mediatorsmay evencould perform aseries of formal steps, such as reviewing, modifying and approving a purchase request. Because a Mediator originates messages, it can also receive replies. So a Mediator really issequence of formal steps, such as reviewing, modifying, and approving afull-fledged User. Crocker Expires August 27, 2008 [Page 11] Internet-Draft EMail Architecture February 2008 Gateway:purchase request. A Gateway is a particularly interesting form of Mediator. It is a hybrid of User and Relay thatinterconnectsconnects heterogeneous mail services. Itsgoalpurpose is to emulate aRelay, andRelay. For a detaileddiscussion is indiscussion, see Section 2.2.3. . 2.2. Mail Handling Service (MHS) Actors The Mail Handling Service (MHS)has the task of performingperforms asingle,single end-to-end transfer on behalf of the Authorand reachingto reach the Recipientaddress(es)addresses specified in the original RFC2821.RcptTo commands.MediatedExchanges that are either mediated orprotracted,iterativeexchanges,and protracted, such as those used for collaboration overtime,time arepart ofhandled by theUser-level service, and areUser actors, notpart of this transfer-level Handling Service. The following figure depictsby the MHS actors. Figure 3 shows the relationships among transfer participants in Internet Mail.ItAlthough it shows theSourceOriginator (labeled Origin) as distinct from theAuthor,Author andDest[ination]Receiver (labeled Recv) as distinct from Recipient,although it is common foreach pairto beof roles usually has the same actor. Transfers typically entail one or more Relays. However direct delivery from theSourceOriginator toDestinationReceiver is possible.For intra-organizationIntra- organization mailservices, it is common toservices usually have only one Relay. Crocker ExpiresAugust 27, 2008May 4, 2009 [Page12]10] Internet-Draft EMail ArchitectureFebruaryOctober 2008+------------+ +-----------+ |++==========++ ++===========++ || Author| +--------+ ||| || Recipient || ++====++====++ +--------+ ++===========++ || |+-----+------+ +....>|Return |+-----------+ | . +--------+ ^ |/\ || +-+------+ || \/ . ^| //===================================================\\|||+---------+ . . +---++---+ |Mail Handling | || ||| . . |Service (MHS)| //==+=========+============================+========+===\\ ||V .| |+---------+.^ +----+---+ | |. MHS | |||| || | Origin+....+ +-<------------+ Dest | | | | |+<...... .................+ Recv |+----+----+ | +--------+|| | | ^ |+-------------->-+-<-------------+ | V | | || +---++----+ . +--------+ || . /\ || ..............+.................. || \/ . . . || +-------+-++----+----+ +-+---+---++--+------+ +-+--++---+ | Relay+-->...-->|+=======>| Relay+------->|+=======>| Relay | +---------++----+----++----++---+ +---------+| V|| || \/ +---------+ | Gateway +-->... +---------+ Figure 3: Relationships Among MHS Actors 2.2.1. Originator The Originatorrole is responsible for ensuringensures that a message is valid for posting and thensubmittingsubmits it to a Relay.Validity includes conformance withA message is valid if it conforms to both Internet Mailstandards, as well as withstandards and local operational policies. The Originator can simply review the message for conformance and reject it ifthere areit finds errors, or it can create some or all of the necessary information. In effect, the Originator is responsible for the functions of the Mail Submission Agent. The Originator operates with dual"allegiance".allegiance. It serves the Author andoften it iscan be the same entity.HoweverBut its role in assuring validity means that it MUST also represent the local operator of the MHS, that is, the local ADministrative Management Domain (ADMD). The Originator alsohas the responsibility forperforms any post-submission, Author-related administrative tasks associated with messagetransmissiontransfer and delivery.Notably this pertainsNotably, these tasks pertain to sending error and deliverynotices. Hence Sourcenotices, enforcing local policies, and dealing with messages from the Author that prove to be problematic for the Internet. The Originator isbest heldCrocker Expires May 4, 2009 [Page 11] Internet-Draft EMail Architecture October 2008 accountable for the message content, even whenthey didit is notcreateresponsible for it. The Author creates the message, but the Originator handles anyor most oftransmission issues with it.Crocker Expires August 27, 2008 [Page 13] Internet-Draft EMail Architecture February 20082.2.2. RelayA mailThe Relay performsforwardforward, by(re-)transmittingtransmitting or retransmitting the messageon towardsto itsRecipient(s). ARecipients. The Relaycan addadds traceinformation. However itinformation [RFC2505] but does not modifyexistingthe envelope information or the message content semantics. It can modify message contentsyntax,representation, such asa changechanging the form of transfer encoding from binary totext transfer-encoding form,text, but only as required to meet the capabilities of the next hop in the MHS. Aset of Relays composes aMail Handling Service (MHS)network.network consists of a set of Relays. This network is above any underlying packet-switching network thattheymight beusingused and below anygatewaysGateways or otheruser-levelMediators. In other words,interestingemail scenarios can involve three distinct architecturallayerslayers, each providing its own type ofstore-and-forwarddata of store- and-forward service: * User Mediators * MHS Relays * Packet Switcheswith the bottom-most usually beingThe bottom layer is the Internet's IP service. The most basic email scenarios involve Relays and Switches. Aborting a message transferresults in havingmakes the Relaybecomean Authorand sendingbecause it must send an error message to the Return address. The potential for looping is avoided byhaving this message, itself, contain noomitting a Returnaddress.address from this message. 2.2.3. Gateway A Gateway is a hybridformof User and Relay thatinterconnectsconnects heterogeneous mail services. Its purpose issimplyto emulate a Relay and the closer it comes to this, the better.However itA Gateway operatesat theas a Userlevel, becausewhen itMUST be ableneeds the ability to modify message content. Differences between mail services can be as small as minor syntax variations, but they usually encompass significant, semantic distinctions. One difference couldhave the concept of anbe emailaddress being a hierarchical,addresses that are hierarchical and machine-specificaddress, versus having it berather than a flat, globalname space.Crocker Expires May 4, 2009 [Page 12] Internet-Draft EMail Architecture October 2008 namespace. Another difference could bebetweensupport for text-onlycontent, versuscontent or multi-media. Hence the Relay function in a Gatewayofferspresents a significant designchallenges, to makechallenge, if theresultresulting performance is to be seen asCrocker Expires August 27, 2008 [Page 14] Internet-Draft EMail Architecture February 2008 seamless as possible.nearly seamless. Themost significantchallenge isin ensuring theto ensure user-to-user functionalitythat matchesbetween the services, despite differences in their syntax andsemantics of independent email standards suites.semantics. The basic test ofa Gateway's adequacy is, of course,Gateway design is whether an Author on one side of a Gateway can send a useful message to a Recipient on the other side, without requiring changes to anyof thecomponents in the Author's or Recipient's mailservices,services other than adding the Gateway. To each of these otherwise independent services, the Gatewaywill appearappears to be a"native"native participant.HoweverBut the ultimate test ofa Gateway's adequacyGateway design is whether the Author and Recipient can sustain a dialogue. Inparticularparticular, can a Recipient's MUA automatically formulate a valid Reply that will reach theinitialAuthor? 2.2.4. Receiver The Receiver performs final delivery or sends the message to an alternate address. It can also perform filtering and other policy enforcement immediately before or after delivery. 2.3. Administrative ActorsActors often areAdministrative actors can be associated with different organizations, each with its own administrative authority. This operational independence, coupled with the need for interaction between groups, provides the motivationfor distinguishingto distinguish among ADministrative Management Domains(ADMD).(ADMDs ). Each ADMD can have vastly different operating policies and trust-based decision-making.AnOne obvious example is the distinction between mail that is exchanged withina single organization, versusan organization and mail that is exchanged between independent organizations. The rules for handlingthese twoboth types of traffic tend to be quite different. That difference requires defining the boundaries of each, and this requires the ADMD construct. Operation of Internet Mail services isapportioned tocarried out by different providers (or operators). Each can be an independent ADMD. This independence of administrative decision-making defines boundaries that distinguish different portions of the Internet Mail service.Examples include an end-user operating their desktop client, aA departmentoperatingthat operates a local Relay, an IT departmentoperatingthat operates an enterpriseRelayRelay, and an ISPoperatingthat operates a public shared emailservice. Theseservice can be configured into many combinations of administrative and operationalrelationships, with each ADMDrelationships. Each is a distinct ADMD, potentially having a complex arrangement of functional components. Figure 4 depicts relationships among ADMDs. The benefit ofhavingthe ADMD construct is to facilitate discussion aboutdesignsdesigns, Crocker Expires May 4, 2009 [Page 13] Internet-Draft EMail Architecture October 2008 policies and operations that need to distinguish between"internal"internal issues and"external"external ones. The architectural impact ofneeding to havethe need for boundaries betweenADMD'sADMDs is discussed in [Tussle]. Most significant is that the entities communicating across ADMD boundarieswilltypically haveanthe added burdento enforceof enforcing organizational policies concerning"external"external communications. At a more mundane level, routing mail between ADMDsCrocker Expires August 27, 2008 [Page 15] Internet-Draft EMail Architecture February 2008can be an issue, such as needing to route mail for partners overspecially-trustedspecially trusted paths.BasicThese are the basic types ofADMDs include --ADMDs: Edge: Independent transferservices,services in networks at the edge of the open Internet Mail service.User: End-user services.Consumer: This might besubsumed under thea type of Edge service,suchas is common for web-based email access. Transit:These areMail Service Providers (MSP)offering value- addedthat offer value-added capabilities for Edge ADMDs, such as aggregation and filtering.Note that Transit services are quiteThe mail-level transit service is different from packet-levelswitching operation. Whereas end-to-endswitching. End-to-end packet transfers usually go through intermediaterouters,routers; email exchange across the open Internetis oftencan be directly between the Boundary MTAs of EdgeADMDs, at the email level.ADMDs. Thisfurtherdistinction between direct and indirect interaction highlights the differences discussed in Section 2.2.2 +--------+ +---------+ +-------++-------+ +-------++-----------+ | ADMD1| ||<===>| ADMD2 |<===>| ADMD3 |<===>| ADMD4 | |ADMD4----- | | ----- | | ----- | | ----- | | |+---------------------->|| | | |User| ||-Edge--+--->|-User| Author | | | | | |+---------+ +--->|| | . | | | | | | | | V | | |ADMD2| |+-------+ +-------+|Edge--+---+|-----| Edge..+....>|.Transit.+....>|-Edge..+....>|.Recipient | | | | | | |+-------+ +----|-Transit-+---+| | +--------+ +---------+ +-------+ +-----------+ Figure 4:ADMDAdministrative Domain (ADMD) Example Edge networks can use proprietary email standards internally. However the distinction between Transit network and Edge network transfer services isprimarilysignificant because it highlights the need for concern over interaction and protection between independent administrations. Inparticularparticular, this distinction calls for Crocker Expires May 4, 2009 [Page 14] Internet-Draft EMail Architecture October 2008 additional care in assessing the transitions ofresponsibility, as well asresponsibility and the accountability and authorization relationships among participants inCrocker Expires August 27, 2008 [Page 16] Internet-Draft EMail Architecture February 2008The interactionsbetween functional components within anof ADMD components are subject to the policies of thatdomain. Policies candomain, which cover concerns suchthings as: oas these: * Reliabilityo* Access controlo* Accountabilityo* Content evaluation and modificationTheyThese policies can be implemented in different functional components, according to the needs of the ADMD. Forexampleexample, see [RFC5068].User, EdgeConsumer, Edge, and Transit services can be offered by providers that operate component services or sets of services.FurtherFurther, it is possible for one ADMD to host services for other ADMDs.Common ADMD examplesThese are--common examples of ADMDs: Enterprise Service Providers:Operating an organization'sThese ADMDs operate the internal data and/or the mailservices.services within an organization. Internet ServiceProviders: OperatingProviders (ISP): These ADMDs operate the underlying data communicationservices that, in turn,services, which are used by one or moreRelaysRelay andUsers. It isUser. ISPs are notnecessarily their job to performresponsible for performing email functions, but theycan, instead,can provide an environment in which those functions can be performed. Mail Service Providers:OperatingCrocker Expires May 4, 2009 [Page 15] Internet-Draft EMail Architecture October 2008 These ADMDs operate email services, such as forend-users,consumers ormailing lists. Operational pragmatics often dictateclient companies. Practical operational concerns demand that providers be involved indetailedadministration and enforcementissues, to help ensure the health of the overall Internet Mail Service.issues. This involvement canincludeextend to operators of lower-level packet services.Crocker Expires August 27, 2008 [Page 17] Internet-Draft EMail Architecture February 20083. Identities Internet Mail uses three forms of identity: mailbox, domainnamename, andmessage-id.message-ID. Eachis required tomust be globally unique. 3.1. Mailbox "A mailbox sends and receives mail. It is a conceptual entity which does not necessarily pertain to file storage." [RFC2822] A mailbox is specified as an Internet Mail address <addr-spec>. It has two distinct parts,dividedseparated by an at-sign("@").(@). Theright-handright side is a globally interpreted domain namethat isassociated with an ADMD. DomainNamesnames are discussed in Section3.2.3.3. Formal Internet Mail addressing syntax can support source routes, to indicate the path through which a messageshouldought to be sent.Although legal, theThe use of source routes is notpart of the modern Internet Mail servicecommon andit is not discussed further.has been deprecated in [RFC2821]. The portion to the left of the at-sign contains a string that is globally opaque and is called the <local-part>. It is to be interpreted only by the entity specified by the address'sright-hand sidedomain name.AllExcept as noted later in this section all other entities MUST treat thelocal-part<local-part> asaan uninterpreted literal string and MUST preserve all of its original details. As such its public distribution is equivalent to sending a Web browser "cookie" that is only interpreted upon being returned to itsAuthor. 3.1.1. Global Standardscreator. Some local-part values have been standardized, forLocal-Partcontacting personnel at an organization. These names cover common operations and business functions. [RFC2142] It is common for sites to have local structuring conventions for the left-hand side <local-part> of an <addr-spec>. This permits sub- addressing, such as for distinguishing different discussion groups used by the same participant. However it is worth stressing that these conventions are strictly private to the user's organization andSHOULDMUST NOT be interpreted by any domain except the one listed in theright-handright side of theaddr-spec.<addr-spec>. The exceptions are those specialized servicesconformingthat conform to public, standardized conventions, as noted below.There are aCrocker Expires May 4, 2009 [Page 16] Internet-Draft EMail Architecture October 2008 A few types of addressesthat have an elaborationelaborate on basic email addressing, with a standardized, global schema for thelocal- part. These<local-part>, Include are conventions between authoring systems andRecipient Gateways, and theyGateways. They are invisible to the public email transfer infrastructure. When an Author is explicitly sendingviathrough a Gateway out of the Internet,there arecoding conventions for thelocal-part, so that<local-part> allow the Authorcanto formulate instructions for the Gateway. Standardized examples ofthissuch conventions are the telephone numbering formats forCrocker Expires August 27, 2008 [Page 18] Internet-Draft EMail Architecture February 2008VPIM [RFC3801], suchas "+16137637582@vpim.example.com",as: +16137637582@vpim.example.com and iFax [RFC3192], suchas "FAX=+12027653000/T33S=1387@ifax.example.com". 3.1.2.as: FAX=+12027653000/T33S=1387@ifax.example.com 3.2. Scope of Email Address Use Email addresses are being used far beyond their original role in email transfer anddelivery role.delivery. In practical terms, an email address string has become the common identifier for representing online identity.What is essential, then,Hence, it is essential to be clear about both the nature and role of an identity string in a particular context andto be clear aboutthe entity responsible for setting that string. For example,see:see Section 4.1.4, Section4.3.3,4.3.3 and Section 5.3.2.3.3. Domain Names A domain name is a global reference to an Internet resource, such as a host, aserviceservice, or a network. A domain name usually maps to one or more IP Addresses.ConceptuallyConceptually, the namemightcan encompass anentireorganization, a collection of machines integrated into a homogeneous service, oronlya single machine. A domain name can be administered to refer to individual users, but this is not common practice. The name is structured as a hierarchical sequence ofsub-names,names, separated by dots("."),(.), with the top of the hierarchy being on theright-endright end of the sequence. Domain names are defined and operated through the Domain Name System (DNS) [RFC1034], [RFC1035], [RFC2181]. When not part of a mailbox address, a domain name is used in Internet Mail to refer to the ADMD or to the host that took action upon the message, such as providing the administrative scope for a messageidentifier,identifier or performing transfer processing.3.3.Crocker Expires May 4, 2009 [Page 17] Internet-Draft EMail Architecture October 2008 3.4. Message Identifier There are two standardized tags for identifying messages:Message-IDMessage-ID: and ENVID.3.3.1.A Message-ID: pertains to content, and an ENVID pertains to transfer. 3.4.1. Message-ID Internet Mail standards provide for, at most, a single Message-ID:. TheMessage-IDMessage-ID: for a single message, which is a user-level tag,primarily used for threadinghas a variety of uses including threading, aiding identification of duplicates, andfor eliminating duplicatesDSN tracking. [RFC2822].Any actor within the Originating ADMD can assignThe Originator assigns theMessage-ID.Message-ID:. Therecipient'sRecipient's ADMD is the intended consumer of theMessage-ID,Message-ID:, although any actor along the transfer pathmightcan use it.Internet Mail standards provide for a single Message-ID; however more than oneMessage-ID: MUST be globally unique. Its format issometimes assigned. Like a mailbox address,similar to that of aMessage-ID hasmailbox, with two distinct parts,dividedseparated by an at-sign("@"). The right-hand(@). Typically, the right sideis globally interpreted andspecifies the ADMD or hostassigningthat assigns theidentifier. The left-hand Crocker Expires August 27, 2008 [Page 19] Internet-Draft EMail Architecture February 2008identifier, and the left side contains a string that is globally opaque and serves to uniquely identify the message within the domain referenced on theright-handright side. The duration of uniqueness for the message identifier is undefined. When a message is revised in any way, thequestion ofdecision whether to assign a newMessage-IDMessage-ID: requires a subjectiveassessment, decidingassessment to determine whether the editorial content has been changed enough to constitute a new message. [RFC2822]saysstates that "a message identifier pertains to exactly one instantiation of a particular message; subsequent revisions to the message each receive new message identifiers."However real-worldYet experiencedictatessuggests that someflexibility.flexibility is needed. An impossible test is whether the recipient will consider the new message to be equivalent to theold.old one. For most components of Internet Mail, there is no way to predict a specific recipient's preferences on this matter. Both creating and failing to create a newMessage-IDMessage-ID: have their downsides.The best that can be offered, here,Here are some guidelines and examples: * If a message is changed only interms ofform, such ascharacter-encoding,character- encoding, itclearlyis still the same message. * If a message has minor additions to the content, such as a mailing list tag at the beginning of the RFC2822.Subject header field, or some mailing list administrative information added to the end of the primarybody-part'sbody-part text,thenitprobablyisstillprobably the same message. Crocker Expires May 4, 2009 [Page 18] Internet-Draft EMail Architecture October 2008 * If a message has viruses deleted from it, itprobablyisstillprobably the same message. * If a message has offensive words deleted from it,thensome recipients will consider it the same message, but some will not. * If a message is translated into a different language,thensome recipients will consider it the same message, but some will not. * If a message is included in a digest of messages,itthe digest constitutes a new message. * If a message is forwarded by a recipient, what is forwarded isconsidered to bea new message.Crocker Expires August 27, 2008 [Page 20] Internet-Draft EMail Architecture February 2008* If a message is "redirected", such as using RFC2822"Redirect-*" headers,"Resent-*" header fields, some recipients will consider it the same message, but some will not. The absence of both objective, precise criteria forMessage-ID re- generation, along with the absence ofre-generating a Message-ID: and strong protection associated with thestring,string means that the presence of an ID can permit an assessment that is marginally better than a heuristic, but the ID certainly has no value on its own for strict formal reference or comparison.Hence Message-IDFor that reason, the Message-ID: SHOULD NOT be used for any function that has security implications.3.3.2.3.4.2. ENVID The ENVID (envelope identifier)is a tag that is primarily for use within Delivery Status Notifications (DSN), so that the Return Address (RFC2821.MailFrom) recipientcancorrelate the DSN withbe used for message-tracking purposes [RFC3885] concerning aparticular message [RFC3461].single posting/delivery transfer. The ENVID labels a single transit of the MHS by a specific message. So, the ENVID isthereforeusedfromfor one message posting, untilthe directly-resultingthat messagedeliveries. Itis delivered. A re-posting of the message, such as by a Mediator, does notsurvive re-postings. The ENVID may also be used forre-use that ENVID, but can use a new one, even though the messagetracking purposes [RFC3885].might legitimately retain its original Message-ID:. The format of an ENVID isfree-form.free form. Although its creator might choose to impose structure on the string, none is imposed by Internet standards. By implication, the scope of the string is defined by the domain name of the Return Address. 4. Services and Standards The InternetMail'sMail architecturedistinguishes amongcomprises six basic types of Crocker Expires May 4, 2009 [Page 19] Internet-Draft EMail Architecture October 2008 functionality, which are arranged to support a store-and-forwardservice architecture.service. As shown in Figure5 these types5, each type can have multiple instances, some of which represent specializedsub-roles.roles. This section considers the activities and relationships among these components, and the Internet Mail standards that apply to them.1.Message2.Mail User Agent (MUA)OriginatingAuthor MUA(oMUA) Receiving(aMUA) Recipient MUA (rMUA)Crocker Expires August 27, 2008 [Page 21] Internet-Draft EMail Architecture February 2008 3.Message Submission Agent (MSA)Author-focussedAuthor-focused MSA functions(oMSA) MHS-focussed(aMSA) MHS-focused MSA functions (hMSA)4.Message Transfer Agent (MTA)5.Message Delivery Agent (MDA) Recipient-focused MDA functions (rMDA)MHS-focussedMHS-focused MDA functions (hMDA)6.Message Store (MS)1.Author MS(oMS) oMS on a remote server (soMS) oMS co-located with the oMUA (uoMS) 2.(aMS) Recipient MS(rms) rMS on a remote server (srMS) rMS co-located with the rMUA (urMS)(rMS) Thissection describes each functional component for Internet Mail, and the standards-based protocols associated with their operation. Software implementations of these architectural components often compress them, such as having the same software do MSA, MTA and MDA functions. However the requirements for each of these components of the service are becoming more extensive. So their separation is increasingly common. NOTE: A discussion about any interesting system architecture is often complicated by confusion between architecture versus implementation. An architecture defines the conceptual functions of a service, divided into discrete conceptual modules. An implementation of that architecture can combine or separate architectural components, as needed for a particular operational environment. Crocker Expires August 27, 2008 [Page 22] Internet-Draft EMail Architecture February 2008 A software system that primarily performs message relaying -- and therefore is an MTA -- might also include MDA functionality. That same MTA system might be able to interface with non-Internet email services and therefore qualify as a Gateway. It is important not to confuse the engineering decisions made to implement a product, with the architectural abstractions used to define conceptual functions. The followingfigure shows function modules and the standardized protocols used between them.Additional protocols and configurations are possible. Boxes defined by asterisks (*) represent functions that often are distributed among two or more systems.Crocker ExpiresAugust 27, 2008May 4, 2009 [Page23]20] Internet-Draft EMail ArchitectureFebruaryOctober 2008+------+++========++ || || +-------+............+ oMUA |..............................|...........++ aMUA ||<............................+ Disp | .+--+-+-+|| || +-------+ . ++=+==+===++ ^ . local,imap}| |{smtp,submission^. . +-----+ | |+---------+ |+--------+ . .******* ||.......................| ReturnsaMS |<---+ | ........................>| Return | .* oMS *<-----+. +-----+ | .+---------+ |+--------+ . .*******| . ***************** ^|.+------V-.---*------------+. +-----V-.----*------------+ *| |. . . MSA | +-------+ * +------+ | *| |. . . | |oMSA +--O-->|aMSA +-(S)->| hMSA | | *| |. . . | +-------+ * +--+---+ | *| |. . V +------------*------+-----+ *| |. . //==========\\ * V {smtp *| |. . || MESSAGE || * +------+ * //===+===\\|. ||----------|| MHS * | MTA | * || dsn |||. || Envelope || * +--+---+ * \\=======//|. || SMTP || * V {smtp * ^ ^|. || Content || * +------+ *| |. . //==+==\\ || RFC2822 || * | MTA+----*-----+ |+....*...... . || mdn || || MIME || * +--+---+ *|. \\=====// \\==========// * smtp}| {local *| |. ^ . MDA * | {lmtp *| |.+------------+------V-----+. . +----------------+------V-----+ *| |. . . |+------++----------+ * +------+ | *| |. . . | | | * | |+--*---------+ |+..*.......... . . | | rMDA|<--O---+|<-(D)--+ hMDA | | *|. . | | | * | ||<-*-------+ ||<.*........ . . |+-+----++-+------+-+ * +------+ | *| |.+---+--+-----*------------+. . +------+---------*------------+ *| |.|. . | *****************| |.pop} +--+ +---+ | |.imap} | | {local | |.******************V******** | |V{smtp,imap,pop,local .* | +------+ * rMS. . +-----+ //===+===\\|.* |. |srMSrMS |*|| sieve |||.* V +--+-+-+ *. +--+--+ \\=======//|.* +------+ pop} | | *. |{imap,pop,local ^|.* | urMS |<-------+ | * | |.* +--+---+ imap} | * | |V .*************************** | |.local}| +------+ |{pop,imap | |.+->| |<------+ | | ...........>|++==========++ . . . || || . . .......>|| rMUA+---------------------------+ | | +-----------------------------------+ +------+++........................... . || ++................................... ++==========++ Figure 5: Protocols and Services Crocker ExpiresAugust 27, 2008May 4, 2009 [Page24]21] Internet-Draft EMail ArchitectureFebruaryOctober 2008 4.1. Message Data The purpose of the Mail Handling Service (MHS) is to exchange a message object among participants [RFC2822], [RFC0822].Hence allAll of its underlying mechanismsare merely in the service of gettingserve to deliver that message from its Author to its Recipients. A message can be explicitly labeled as to its nature [RFC3458]. A message comprises atransit handlingtransit-handling envelope and the message content. The envelope contains information used by the MHS. The content is divided into a structured header and the body. The header comprises transit handling trace information andend-userstructuredfields.fields that are part of the Author's message content. The bodymaycan be unstructuredsimplelines oftext,text orit may beaMIMEtree of multi-media subordinate objects, calledbody-parts,"body-parts" or attachments [RFC2045], [RFC2046], [RFC2047], [RFC4288], [RFC4289], [RFC2049]. In addition, Internet Mail has a few conventions for special controldata --data, notably: Delivery Status Notification (DSN): A Delivery Status Notification (DSN) is a message that can be generated by the MHS (MSA,MTAMTA, or MDA) and sent to the RFC2821.MailFrom address.The mailbox for this isAn MDA and MTA are shown asReturnssources of DSNs in Figure5.5, and the destination is shown as Returns. DSNs provide information about message transit, such astransmissiontransfer errors or successfuldelivery [RFC3461].delivery. [RFC3461] Message Disposition Notification (MDN): A Message Disposition Notification (MDN) is a message that provides information aboutuser-level, Recipient-side messagepost-delivery processing, such as indicating that the message has been displayed [RFC3798] or the form of content that can be supported [RFC3297]. It can be generated by an rMUA and is sent to theDisposition-Notification-To address(es).Disposition- Notification-To addresses. The mailbox for this is shown as Disp in Figure 5. Message Filtering (SIEVE): Crocker ExpiresAugust 27, 2008May 4, 2009 [Page25]22] Internet-Draft EMail ArchitectureFebruaryOctober 2008SIEVESieve is a scripting languagethat permits specifyingused to specify conditions for differential handling of mail, typically at the time of delivery[RFC3028]. It[RFC5228]. Scripts can be conveyed in a variety of ways, as a MIME part. Figure 5 shows a Sievespecificationscript going from the rMUA to the MDA.HoweverHowever, filtering can be done at many different points along the transitpathpath, and any one or more of them might be subject to Sieve directives, especially within a single ADMD.Hencethe Figure 5 shows only one relationship, for (relative) simplicity. 4.1.1. Envelope Internet Mail has a fragmented framework for transit-related"handling"handling information. Information that isdirectlyused directly by the MHS is called the"envelope"."envelope." It directs handling activities by the transfer serviceasand is carried in transfer service commands. That is, the envelope exists in thetransfer protocol SMTP [RFC2821]. Trace information records handling activity andtransfer protocol SMTP. [RFC2821] Trace information, such as RFC2822.Received, is recorded in the messageHeader.header and is not subsequently altered. [RFC2822] 4.1.2. Header Fields Header fields are attribute name/value pairscoveringthat cover an extensible range of emailservice,service parameters, structured usercontentcontent, and user transactionmeta- information.meta-information. The core set of header fields is defined in [RFC2822], [RFC0822]. It is common practice to extend thisset,set for different applications. Procedures for registering header fields are defined in[RFC4021].[RFC3864]. An extensive set of existing header field registrations is provided in[RFC3864].[RFC4021]. One dangerwithof placing additional information in header fields is that Gateways often alter or delete them. 4.1.3. Body The body of a message mightsimplybe lines of ASCII text orit might bea hierarchically structuredinto acomposition of multi-mediabody- partbody-part attachments, usingMIMEMIME. [RFC2045], [RFC2046], [RFC2047], [RFC4288],[RFC2049]. MIME structures each body-part into a recursive set of MIME header field meta-data and MIME Content sections.[RFC2049] 4.1.4. Identity References in a MessageFor a message in transit,Table 1 lists the coreuses ofidentifierscombine into:present in a message during transit. Crocker ExpiresAugust 27, 2008May 4, 2009 [Page26]23] Internet-Draft EMail ArchitectureFebruaryOctober 2008+-----------------------+----------------+---------------------++----------------------+----------------+---------------------------+ | Layer | Field | Set By |+-----------------------+----------------+---------------------++----------------------+----------------+---------------------------+ | Message Body | MIME Header | Author | | Message headerfields|FromFrom: | Author | | fields |Sender|Source| | |Reply-ToSender: | Originator | | | Reply-To: | Author | | |To, CC, BCCTo:, CC:, BCC: | Author | | |Message-IDMessage-ID: |SourceOriginator | | |ReceivedReceived: |Source,Originator, Relay,Dest| | |Return-Path| Receiver | | | Return-Path: | MDA, from MailFrom | | |Resent-*Resent-*: | Mediator | | |List-IdList-Id: | MediatorAuthor| | |List-*List-*: | MediatorAuthor| | SMTP | HELO/EHLO | Latest Relay Client | | | ENVID |SourceOriginator | | | MailFrom |SourceOriginator | | | RcptTo | Author | | | ORCPT | Author | | IP | Source Address | Latest Relay Client |+-----------------------+----------------+---------------------++----------------------+----------------+---------------------------+ Table 1: Layered IdentitiesTheThese are the most common address-relatedfields are:fields: RFC2822.From: Set by - Author Names and addresses forauthor(s)authors of the message content are listed in the From: field. RFC2822.Reply-To: Set by - Author If amessageRecipient sends a reply message that would otherwise use the RFC2822.From fieldaddress(es) that are containedaddresses in the original message,then they are instead to usetheaddress(es)addresses in the RFC2822.Reply-Tofield.field are used instead. In otherwordswords, this fieldis a direct override ofoverrides the From:field,field for responses from Recipients. RFC2822.Sender: Set by -SourceOriginator Crocker Expires May 4, 2009 [Page 24] Internet-Draft EMail Architecture October 2008 This field specifies the address responsible for submitting the messageintoto the transfer service.For efficiency thisThis field can be omitted if it contains the same address as RFC2822.From.HoweverHowever, omitting this field does not meanthere isthat no Senderspecified. Ratheris specified; it means that that header field is virtual and that the address in the From: field MUST be used.Crocker Expires August 27, 2008 [Page 27] Internet-Draft EMail Architecture February 2008Specification of the notifications Returnaddresses --addresses, which are contained inRFC2821.MailFrom --RFC2821.MailFrom, is made by the RFC2822.Sender. Typically the Return address is the same as the Sender address.HoweverHowever, some usage scenarios require it to be different. RFC2822.To/.CC: Set by - Author These fields specify MUA Recipient addresses.HoweverHowever, some or all of the addresses in these fields might not be present in the RFC2821.RcptTo commands. The distinction between To and CC is subjective.GenerallyGenerally, a To addressee is considered primary and is expected to take action on the message. A CC addressee typically receives a copyonly for their information.as a courtesy. RFC2822.BCC: Set by - Author A copy of the message might becopiedsent to an addressee whose participation is not to be disclosed to the RFC2822.To or RFC2822.CC Recipients and, usually, not to the other BCC Recipients. TheBCCBCC: header field indicates a message copy to such a Recipient.Typically, the field lists no addresses or only lists the single address of the Recipient receiving this copy. An MUA will typically make separate postings for TO and CC Recipients, versus BCC Recipients. The former will see no indication that any BCCs were sent, whereas the latter have a BCC field present. It might be empty, contain a comment, or contain one or more BCC addresses, depending upon the preferencesUse ofthe Author.this field is discussed in [RFC2822]. RFC2821.HELO/.EHLO: Set by -Source The MSAOriginator, MSA, MTA Any SMTP client -- including Originator, MSA, or MTA -- can specify its hosting domain identity for the SMTP HELO or EHLO command operation. RFC3461.ENVID: Set by -SourceOriginator The MSA can specify an opaque string, to be included in a DSN, as a means of assisting the Return address recipient in identifying the message that produced aDSN,DSN or message tracking. RFC2821.MailFrom: Set by -SourceOriginator Crocker Expires May 4, 2009 [Page 25] Internet-Draft EMail Architecture October 2008 This field is an end-to-end string that specifies an email address for receiving return control information, such as"bounces".returned messages. The name of this field is misleading, because it is not required to specify either theauthorAuthor or theActoractor responsible for submitting theCrocker Expires August 27, 2008 [Page 28] Internet-Draft EMail Architecture February 2008message. Rather, theActoractor responsible for submission specifies the RFC2821.MailFrom address.UltimatelyUltimately, the simple basis for decidingwhatwhich address needs to be in the RFC2821.MailFrom field is to determinewhatwhich addressneeds tomust be informed abouttransmission- leveltransfer-level problems(and, possibly,(and possibly successes.) RFC2821.RcptTo: Set by -AuthorAuthor, Final MTA, MDA. This field specifies the MUA mailbox address of arecipient.Recipient. The string might not be visible in the message content header. For example, the message destination address header fields, such as RFC2822.To, might specify a mailing list mailbox, while the RFC2821.RcptTo address specifies a member of that list. RFC2821.ORCPT: Set by - Author. This is an optional parameter to the RCPT command, indicating the original address to which the current RCPT TO address corresponds, after a mapping was performed during transit. An ORCPT is the only reliable way to correlate a DSN from a multi- recipient message transfer with the intended recipient. RFC2821.Received: Set by -Source,Originator, Relay, Mediator, Dest Thisindicatesfield contains trace information, including originating host,relays,Relays, Mediators, and MSA host domain names and/or IP Addresses. RFC2821.Return-Path: Set by -SourceOriginator The MDA records the RFC2821.MailFrom address into the RFC2822.Return-Path field. RFC2919.List-Id: Set by - Mediator Author This field provides a globally unique mailing list naming framework that is independent of particular hosts. [RFC2919] The identifier is in the form of a domain name;howeverhowever, the string usually is constructed by combining the two parts of an emailaddress and theaddress. The resultrarelyis rarely a true domain name, listed in the domain nameservice --service, although it can be. Crocker Expires May 4, 2009 [Page 26] Internet-Draft EMail Architecture October 2008 RFC2369.List-*: Set by - Mediator Author [RFC2369] defines a collection of message header fields for use by mailing lists. Ineffecteffect, they supply list-specific parameters for common mailing list user operations. The identifiers for these operations are for thelist, itself,list itself and theuser-as-subscriber [RFC2369].user-as-subscriber. [RFC2369] RFC0791.SourceAddr: Set by - The Client SMTP sending host immediately preceding the current receiving SMTP server.Crocker Expires August 27, 2008 [Page 29] Internet-Draft EMail Architecture February 2008[RFC0791] defines the basic unit of data transfer for theInternet,Internet: the IP Datagram. It contains a"Source Address"Source Address field that specifies the IP Address for the host (interface) from which the datagram was sent. This information is set and provided by the IP layer,and is thereforewhich makes it independent ofmail-levelmail- level mechanisms. As such, it is often taken to be authoritative, although it is possible to provide false addresses. 4.2. User-Level Services Interactions at the user level entail protocol exchanges, distinct from those that occur at lower layers of the Internet Mailarchitecture, which isMHS architecture that is, in turn, above the Internet Transport layer. Because the motivation for email, and much of its use, is for interaction amonghumans,people, the nature and details of these protocol exchanges often are determined by the needs ofhumaninterpersonal and group communication.In terms of efforts to specify behaviors, one effect of this is to requireTo accommodate the idiosyncratic behavior inherent in such communication, only subjective guidelines, rather than strict rules, can be offered for some aspects of system behavior. Mailing Lists provide particularly salientexamples of this.examples. 4.2.1. Mail User Agent (MUA) A Mail User Agent (MUA) works on behalf ofend-usersUser actors andend-userUser applications. It is their"representative"representative within the email service. TheOrigination-sideAuthor MUA(oMUA)(aMUA) creates a message and performs initial"submission"submission into the transferinfrastructure,infrastructure via a Mail Submission Agent (MSA). It can also perform any creation- and posting-time archival in its Message Store(oMS).(aMS). AnMUA's oMS will typically includeMUA aMS can organize messages in many different ways. A common model uses aggregations, called "folders". This model allows a folder for messages under development (Drafts), a folder for messages waiting to be sent (Queued orUnsent)Unsent), and a folder for messages that have been successfully posted fortransmissiontransfer (Sent). But none of these folders is required. For example, IMAP allows drafts to be stored in any Crocker Expires May 4, 2009 [Page 27] Internet-Draft EMail Architecture October 2008 folder; so no Drafts folder is present. TheRecipient-sideRecipient MUA (rMUA) works on behalf of theend-userRecipient to process received mail. This processing includes generatinguser- level returnuser-level disposition control messages, displaying and disposing of the received message, and closing or expanding the user communicationloop,loop by initiating replies and forwarding new messages.Crocker Expires August 27, 2008 [Page 30] Internet-Draft EMail Architecture February 2008NOTE: Although not shown in Figure 5, an MUAcan, itself,itself can have a distributed implementation, such as a "thin" user interface module on alimited end-user device,constrained device such as a smartphone, withthe bulkmost of the MUA functionalityoperatedrunning remotely on a more capable server. An example of such an architecture might use IMAP [RFC3501] for most of the interactions between an MUA client and an MUA server.A standardizedAn approach for such scenarios is defined by [RFC4550]. A Mediator is special class of MUA. It performs message re-posting, as discussed in Section 2.1.IdentityAn MUA can be automated, on behalf of a user who is not present at the time the MUA is active. One example is a bulk sending service that has a timed-initiation feature. These services are not to be confused with a mailing list Mediator, since there is no incoming message triggering the activity of the automated service. A popular and problematic MUA is an automatic responder, such as one that sends out-of-office notices. This behavior might be confused with that of a Mediator, but this MUA is generating a new message. Automatic responders can annoy users of mailing lists unless they follow [RFC3834]. ****** The recommendations in RFC 3834 are an important consequence of the addressing architecture of Internet Mail so they do help illustrate the architecture. ***** These identity fields are relevant to a typicalend-user MUA include:MUA: RFC2822.From RFC2822.Reply-To RFC2822.Sender Crocker Expires May 4, 2009 [Page 28] Internet-Draft EMail Architecture October 2008 RFC2822.To, RFC2822.CC RFC2822.BCC 4.2.2. Message Store (MS) An MUA can employ a long-term Message Store (MS). Figure 5 depicts anOrigination-sideAuthor's MS(oMS)(aMS) and aRecipient-sideRecipient's MS (rMS).There is a rich set of choices for configuring a store, because anyAn MSmay comprise a distributed set of component stores. In Figure 5, the rMS demonstrates this by showing an rMS that iscan be located on a remote server(srMS) and an rMS that isor on the same machine as theMUA (urMS). The relationship between two message stores, themselves, can vary. As discussed in [RFC1733] the operational relationship among MSs can be -- Online: Only a remoteMUA. An MSis used, withacquires messagesbeing accessible only when the MUA is attached to the MS, and the MUA repeatedly fetches all or part of a message,fromone session to the next. Crocker Expires August 27, 2008 [Page 31] Internet-Draft EMail Architecture February 2008 Offline:an MDA either by a local mechanism or by using POP or IMAP. The MUA accesses the MSiseither by a localto the user, and messages are completely moved from any remote store,mechanism or by using POP or IMAP. Using POP for message access, rather than(also) being retained there. Disconnected: An rMS and a uMS are kept synchronized, for all or part of their contents, while therebulk transfer, isa connection between them. While they are disconnected, mail can continue to arrive at the rMSrare, awkward, andthe user may continue to make changes to the uMS. Upon reconnection, the two stores are re-synchronized.largely non- standard. 4.3. MHS-Level Services 4.3.1. Mail Submission Agent (MSA) A Mail Submission Agent (MSA) accepts the messagesubmission fromsubmitted by theoMUAaMUA and enforces the policies of the hosting ADMD and the requirements of Internet standards. An MSA represents an unusual functional dichotomy.A portion of its task is to represent MUA (uMSA)It represents the interests of the Author (aMUA) during message posting, to facilitate postingsuccess, and another portion is to represent MHS (hMSA) interests. This is bestsuccess; it also represents the interests of the MHS. In the architecture, these responsibilities are modeled, as shown in Figure 5,withby dividing the MSA into two sub-components,one for the oMUA (oMSA)aMSA andonehMSA, respectively. Transfer of responsibility for a single message, from an Author's environment to theMHS (hMSA) The hMSA's functionMHS, isto takecalled "posting". In Figure 5 it is marked as the (S) transition, within the MSA. The hMSA takes transit responsibility for a message that conforms to the relevant Internet standards and to local site policies. It rejects messages that are not in conformance. TheoMSA's is to performMSA performs final message preparation for submission andto effecteffects the transfer of responsibility to the MHS, via the hMSA. The amount of preparationwill dependdepends upon the local implementations. Examples of oMSA taskscould be to addinclude adding header fields, such as Date: andMessage-ID, to modifyMessage-ID:, and modifying portions of the message from local notations to Internet standards, such as expanding an address to its formal RFC2822 representation. Historically, standards-based MUA/MSAinteractionsmessage postings have usedSMTP [RFC2821]. A recent alternativeSMTP. [RFC2821] The standard currently preferred isSUBMISSION [RFC4409].SUBMISSION. [RFC4409] Although SUBMISSION derives from SMTP, it uses a separate TCP port and imposes distinct requirements, such as access authorization.Identities relevant to the MSA include: RFC2821.HELO/.EHLOCrocker ExpiresAugust 27, 2008May 4, 2009 [Page32]29] Internet-Draft EMail ArchitectureFebruaryOctober 2008 These identities are relevant to the MSA: RFC2821.HELO/.EHLO RFC3461.ENVID RFC2821.MailFrom RFC2821.RcptTo RFC2821.Received RFC0791.SourceAddr 4.3.2. Mail Transfer Agent (MTA) A Mail Transfer Agent (MTA) relays mail for one application-level"hop"."hop." It is like a packet-switch or IP router in that its job is to make routing assessments and to move the message closer to theRecipient(s).Recipients. Of course, email objects are typically much larger than the payload of a packet or datagram, and the end-to-end latencies are typically much higher. Relaying is performed by a sequence of MTAs, until the message reaches a destination MDA.HenceHence, an MTA implements both client and server MTAfunctionality. It does not make changes tofunctionality; it does not change addresses in the envelope or reformulate the editorial content.Hence aA change in data form, such as totheMIME Content-Transfer- Encoding, is within the purview of an MTA,whereasbut removal or replacement of body content is not.Also it can addAn MTA also adds trace information.Of course[RFC2505] NOTE: Within a destination ADMD, emailobjects are typically much larger than the payload ofrelaying modules can make apacket or datagram, andvariety of changes to theend-to-end latenciesmessage, prior to delivery. In such cases, these modules aretypically much higher.acting as Gateways, rather than MTAs. Internet Mailprimarilyuses SMTP [RFC2821], [RFC0821] primarily to effect point-to-point transfers between peer MTAs. Other transfer mechanisms include Batch SMTP [RFC2442] and ODMR [RFC2645]. As with most network layer mechanisms, the InternetMail'sMail SMTP supports a basic level of reliability, by virtue of providing for retransmission after a temporary transfer failure.Contrary toUnlike typical packet switches (and Instant Messagingservices)services), Internet Mail MTAstypicallyare expected to store messages in a manner that allows recovery across service interruptions, such as host system shutdown.However theThe degree of such Crocker Expires May 4, 2009 [Page 30] Internet-Draft EMail Architecture October 2008 robustness and persistence by an MTA canbe highly variable.vary. The base SMTP specification provides a framework for protocol response codes. An extensible enhancement to this framework is defined in [RFC5248] The primary"routing"routing mechanism for Internet Mail is the DNS MX record [RFC1035], which specifiesa hostan MTA through which the queried domain can be reached. This mechanism presumes apublic --public, or at least acommon --common, backbone that permits any attachedhostMTA to connect to any other.Identities relevantMTAs can perform any of these well-established roles: Boundary MTA: An MTA that is part of an ADMD and interacts with MTAs in other ADMDs. This is also called a Border MTA. There can be different Boundary MTAs, according to the direction of mail-flow. Outbound MTA: An MTAinclude: Crocker Expires August 27, 2008 [Page 33] Internet-Draft EMail Architecture February 2008that relays messages to other ADMDs. Inbound MTA: An MTA that receives inbound SMTP messages from MTA Relays in other ADMDs, for example, an MTA running on the host listed as the target of an MX record. Final MTA: The MTA that transfers a message to the MDA. These identities are relevant to the MTA: RFC2821.HELO/.EHLO RFC3461.ENVID RFC2821.MailFrom RFC2821.RcptToRFC2822.ReceivedRFC2822.Received: Set by - Relay Server RFC0791.SourceAddr 4.3.3. Mail Delivery Agent (MDA) A transfer of responsibility from the MHS to a Recipient's environment (mailbox) is called "delivery." In the architecture, as depicted in Figure 5, delivery takes place within a Mail Delivery Crocker Expires May 4, 2009 [Page 31] Internet-Draft EMail Architecture October 2008 Agent (MDA)delivers emailand is shown as the (D) transition from the MHS-oriented MDA component (hMDA) to theRecipient's mailbox. ItRecipient-oriented MDA component (rMDA). An MDA can provide distinctive, address-based functionality, made possible by its detailedknowledge ofinformation about the properties of the destination address. Thisknowledgeinformation might also be present elsewhere in the Recipient's ADMD, such as at an organizational border (Boundary) Relay.HoweverHowever, it is required for theMDA, if only becauseMDA, if only because the MDA is required to know where to deliver the message. Like an MSA, an MDA serves two roles, as depicted in Figure 5. Formal transfer of responsibility, called "delivery", is effected between the two components that embody these roles as shows as "(D)" in Figure 5. The MHS portion (hMDA) primarily functions as a server SMTP engine. A common additional role is to re-direct the message to an alternative address, as specified by the recipient addressee's preferences. The job of the recipient portion of the MDA (rMDA) is to perform any delivery actions that the Recipient specifies. Transfer into the MDA is accomplished by a normal MTA transfer mechanism. Transfer from an MDA to an MS uses an access protocol, such as POP or IMAP. NOTE: The term "delivery" can refer to the formal, MHS function specified here or to the first time a message is displayed to a Recipient. A simple, practical test for whether the MHS-based definition applies is whether a DSN can be generated. These identities are relevant to the MDA: RFC2821.Return-Path: Set by - Author Originator or Mediator Originator The MDA records the RFC2821.MailFrom address into the RFC2822.Return-Path field. RFC2822.Received: Set by - MDA server An MDA can record a Received: header field to indicate trace information, including source host and receiving host domain names and/or IP Addresses. Crocker Expires May 4, 2009 [Page 32] Internet-Draft EMail Architecture October 2008 4.4. Transition Modes From the origination site to the point of delivery, Internet Mail usually follows a "push" model. That is, the actor that holds theMDA must know wheremessage initiates transfer todeliverthemessage. Asnext venue, typically withan MSA, an MDA serves two roles, as depicted in Figure 5. Formal transfer of responsibility, called "delivery" is effected betweenSMTP [RFC2821] or LMTP [RFC2033]. With a "pull" model, thetwo componentsactor thatembody these roles. The MHS portion (hMDA) primarily functions as a server SMTP engine. A common additional role isholds the message waits for the actor in the next venue tore-directinitiate a request for transfer. Standardized mechanisms for pull-based MHS transfer are ETRN [RFC1985] and ODMR [RFC2645]. After delivery, the Recipient's MUA (or MS) can gain access by having the message pushed toan alternative address, as specifiedit or by having therecipient addressee's preferences. The jobreceiver of access pull therecipient portionmessage, such as by using POP [RFC1939] and IMAP [RFC3501]. 4.5. Implementation and Operation A discussion ofthe MDA (rMDA) is to performanydelivery-actionsinteresting system architecture often bogs down when architecture and implementation aredesired byconfused. An architecture defines therecipient. Using Internet protocols, delivery can be effected byconceptual functions of avarietyservice, divided into discrete conceptual modules. An implementation ofstandard protocols. When coupledthat architecture can combine or separate architectural components, as needed for a particular operational environment. For example, a software system that primarily performs message relaying is an MTA, yet it might also include MDA functionality. That same MTA system might be able to interface with non-Internet email services and thus perform both as aninternalMTA and as a Gateway. Similarly, implemented modules might be configured to form elaborations of the architecture. An interesting example is a distributed MS. One portion might be a remote server and another might be localmechanism, SMTP [RFC2821]to the MUA. As discussed in [RFC1733], there are three operational relationships among such MSs: Online: The MS is remote, andLMTP [RFC2033] permit "push" deliverymessages are accessible only when the MUA is attached to theRecipient system, atMS so that theinitiativeMUA will re-fetch all or part of a message, from one session to theupstream email service. POP [RFC1939]next. Offline: The MS is local to the user, andIMAP [RFC3501]messages areusedcompletely moved from any remote store, rather than (also) being retained there. Disconnected: An rMS and a uMS are kept synchronized, for"pull" delivery at the initiativeall or part of their contents, while they are connected. When they are disconnected, mail can arrive at theRecipient system. POPrMS andIMAPthe user canalso be used for repeated access to messages on a remote MS. Identities relevantmake changes to theMDA include: RFC2821.Return-Path: Set by - Author Source or Mediator SourceuMS. TheMDA records the RFC2821.MailFrom address into the RFC2822.Return-Path field.two stores are re-synchronized when they are reconnected. Crocker ExpiresAugust 27, 2008May 4, 2009 [Page34]33] Internet-Draft EMail ArchitectureFebruaryOctober 2008RFC2822.Received: Set by - MDA server An MDA can record a Received header field to indicate trace information, including source host and receiving host domain names and/or IP Addresses.5. Mediators BasicanAuthor tothe specifiedRecipients is accomplished by using anasynchronous,asynchronous store-and-forward communicationinfrastructure,infrastructure in a sequence of independent transmissions through some number of MTAs. A very different task is aUser-levelsequence of postings anddeliveries,deliveries through Mediators. A Mediator forwards a message, through are-postingre- posting process. The Mediatordoes shareshares some functionality with basic MTA relaying, butit enjoys a degree of freedom withhas greater flexibility in both addressing and contentthatthan isnotavailable to MTAs.RFC2821.HELO/.EHLO: SetThis is the core set of message information that is commonly set by- Mediator Source RFC3461.ENVIDall types of Mediators: RFC2821.HELO/.EHLO: Set by -Author Source orMediatorSource RFC2821.MailFrom:Originator RFC3461.ENVID: Set by -Author Source orMediatorSourceOriginator RFC2821.RcptTo: Set by - Mediator Author RFC2821.Received: Set by - Mediator Dest ThesalientMediator can record received information, to indicate the delivery to the original address and submission to the alias address. The trace of Received: header fields can include everything from original posting, through relaying, to final delivery. The aspect of aMediator,Mediator that distinguishes it from any other MUA creatingan entirely new message,a message is that a Mediator preserves the integrity and tone of the original message, including the essential aspects of its origination information. The Mediator might also add commentary. Examples of MUAmessage creation NOT performed by Mediators include --messages that a Mediator does not create include: New message that forwards an existing message:ThisAlthough this actionrather curiouslyprovides a basic template for a class ofMediators. However forMediators, its typical occurrenceitisnot itselfnot, itself, an example of a Mediator. The new message is viewed as being from theActoractor that is doing the forwarding, rather thanbeing Crocker Expires August 27, 2008 [Page 35] Internet-Draft EMail Architecture February 2008from the original Author. A new message encapsulates the original message and is seen asstrictly "from"from theMediator. Thenew Originator. This Mediator Originator might add commentary andcertainly has the opportunity tocan modify the original message content.TheCrocker Expires May 4, 2009 [Page 34] Internet-Draft EMail Architecture October 2008 Because the forwarded message istherefore independenta component of theoriginalmessageexchange andsent by the new Originator, the new message creates a newmessagedialogue. However the final Recipient still sees the contained message as from the original Author. Reply: When a Recipientformulates a response backresponds to theoriginal message's author,Author of a message, the new message is not typically viewed asbeinga"forwarding"forwarding of the original. Its focus is the new content, although it might contain all or part of the materialinfrom the original message.Therefore theThe earlier material is merely contextual and secondary. This includes automated replies, such as vacation out-of-office notices, as discussed in Section 4.2.1. Annotation: The integrity of the original message is usually preserved, but one or more comments about the message are added in a manner that distinguishes commentary from original text. Thetoneprimary purpose of the new message isthat it is primarilyto provide commentary from a new Author, similar to a Reply. The remainder of this section describes common examples of Mediators. 5.1.Aliasing AliasingAlias One function of an MDA is to determine the internal location of a mailbox in order to perform delivery. An Alias is a simplere-addressingre- addressing facility thatis available in most MDA implementations. It is performed just before placingprovides one or more new Internet Mail addresses, rather than amessage into the specified Recipient's mailbox. Insteadsingle, internal one; the messageis submitted back tocontinues through the transfer service, for delivery to one or more alternate addresses. Although typically implemented as part of an MDA, this facility isstrictlya Recipientuserfunction. It resubmits the message,replacingalthough all handling information except the envelopeaddress, on behalf of the mailboxrecipient (rfc2821.RcptTo) addressthat was listed inis retained. In particular, theenvelope.Return address (rfc2821.MailFrom) is unchanged. What ismostdistinctive about this forwarding mechanism is how closely itcompares toresembles normal MTA store-and-forwardRelaying.relaying. Its onlyinterestingsignificant difference is that it changes the RFC2821.RcptTo value.Having the change beBecause thissmall makes it easy to view Crocker Expires August 27, 2008 [Page 36] Internet-Draft EMail Architecture February 2008change is so small, aliasing can be viewed as a part of the lower-level mail relaying activity.However theHowever, this small change has a large semantic impact: The designated recipient has chosen a new recipient.Hence that original recipient SHOULD become responsible for any handling issues. This change would be reflected by replacingCrocker Expires May 4, 2009 [Page 35] Internet-Draft EMail Architecture October 2008 NOTE: When themessage's RFC2821.MailFrom address to bereplacement list includes more than onewithin the scope of the ADMD doingaddress, thealiasing. An MDA thatalias isre-posting a messageincreasingly likely toanhave delivery problems. Any problem reports go to the original Author, not the administrator of the alias entry. This makes it more difficult to resolve the problem, because the original Author has no knowledge of the Alias mechanism. Alias typically changes only envelope information: RFC2822.To/.CC/.BCC: Set by - Author These fields retain their original addresses.RFC2821.RcptTo: Set by - Mediator Author This field contains an alias address.RFC2821.MailFrom: Set by - AuthorSource or Mediator Source The Actor responsible for submission to an alias address will often retain the original address to receive handling Returns.The benefit of retaining the original MailFrom value is to ensure that an actor related to theorigination-side Actororiginating ADMD knowsthatthere has been a delivery problem. On the other hand, the responsibility for handling problems, when transiting from theproblemoriginal recipient mailbox to the alias mailbox usually lies withthethat original Recipient,sincebecause the Alias mechanism is strictly underthethat Recipient's control.RFC2821.Received Set by - Mediator Dest The Actor can record Received information, to indicate the delivery toRetaining the original MailFrom addressand submission to the alias address. The trace of Received header fields can therefore include everything from original posting through final delivery to a final delivery.prevents this. 5.2.Re-SendingReSender Also calledRe-Directing, Re-Sending differsthe ReDirector, the ReSender's actions differ fromForwarding by virtue of havingforwarding because the Mediator"splice""splices" a message's addressinginformation,information to connect the Author of the original messageandwith the Recipient of the new message. This connection permits them to have direct exchange, using their normal MUA Replyfunctions. Hencefunctions, while also recording full reference information about the Recipient who served as a Mediator. Hence, the new Recipient sees the message as beingFrom:from the original Author, even if the Mediator adds commentary.Crocker Expires August 27, 2008 [Page 37] Internet-Draft EMail Architecture February 2008 Identities specified inThese identities are relevant to a resentmessage includemessage: RFC2822.From: Set by - original Author Crocker Expires May 4, 2009 [Page 36] Internet-Draft EMail Architecture October 2008 Names andauthor(s)Author of the message content are retained. The free-form (display-name) portion of the address might be modified to provide informal reference to theActor responsible for the redirection.ReSender. RFC2822.Reply-To: Set by - original Author If this field is present in the original message, it is retained in theResentresent message. RFC2822.Sender: Set by -Author SourceAuthor's Originator or MediatorSource.Originator. RFC2822.To/.CC/.BCC: Set by - original Author These fields specify the original message Recipients. RFC2822.Resent-From: Set by - Mediator AuthorTheThis address is of the original Recipient who is redirecting the message.OtherwiseOtherwise, the same rules applyforto theResent-From:Resent- From: field asforto an original RFC2822.From field. RFC2822.Resent-Sender: Set by - MediatorSourceOriginator The address of theActoractor responsible forre-submittingresubmitting the message. As with RFC2822.Sender, this fieldis oftencan be omitted when itwould merely containcontains the same address as RFC2822.Resent-From. RFC2822.Resent-To/-CC/-BCC: Set by: Mediator Author The addresses of the new Recipients whowillare nowbeable to reply to the original author. RFC2821.MailFrom: Set by - MediatorSourceOriginator TheActoractor responsible forre-submissionresubmission (RFC2822.Resent-Sender) is also responsible for specifying the new MailFrom address.Crocker Expires August 27, 2008 [Page 38] Internet-Draft EMail Architecture February 2008 RFC2821.RcptTo: Set by - Mediator Author This will contain the address of a new Recipient. RFC2822.Received: Set by - Mediator Dest When resending a message the submission agent can record a Received header field, to indicate the transition from original posting to resubmission.5.3. Mailing Lists A Mailinglists haveList receives messages as an explicitemail addressesaddressee andthey re-post messagesthen re-posts them to a list of subscribed members. The Mailing ListActorperforms a task that can be viewed as an elaboration of theRe-Director role.ReSender. In addition to sending the new message to a potentially large number of new Recipients, theMediatorMailing List can modify content,such asfor example, by deleting attachments, converting the format, and addinglist-specificlist- specific comments.In addition, archiving listMailing Lists also archive messagesis common.posted by Crocker Expires May 4, 2009 [Page 37] Internet-Draft EMail Architecture October 2008 Authors. Still the message retains characteristics of being"from"from the original Author.IdentitiesThese identities are relevant to a mailing list processor, when submitting amessage, include:message: RFC2919.List-Id: Set by - Mediator Author RFC2369.List-*: Set by - Mediator Author RFC2822.From: Set by - originalAuthor Names and email addressesAuthor Names and email addresses for the original Author of the message content are retained. RFC2822.Reply-To: Set by - Mediator or original Author Although problematic, it is common for a Mailing List to assign its own addresses to the Reply-To: header field of messages that it posts. This assignment is intended to ensure that replies go to all list members, rather than to only the original Author. As a User actor, a Mailing List is the Author of the new message and can legitimately set the Reply-To: value. As a Mediator attempting to represent the message on behalf of its original Author, creating or modifying a Reply-To: field can be viewed as violating that Author's intent. Modifying the field to include the list address can send to the entire list replies that are meant only for the original Author. When the Mailing List does not set the field, a reply meant for the entire list can instead go only to the originalauthor(s)Author. At best, either choice is a matter of group culture for themessage content are specified -- or, rather, retained. RFC2822.Reply-To: Set by - original Author or Mediator Authorparticular list. RFC2822.Sender: Set by - AuthorSourceOriginator or MediatorSourceOriginator Thiswillfield usuallyspecifyspecifies the address of theActoractor responsible formailing listMailing List operations.However some mailing listsMailing Lists that operate in a mannerverysimilar to a simple MTARelay, so that theyRelay preserve as much of the original handling information as possible, including the original RFC2822.Sender field. (Note that this mode of operation causes the Mailing List to behave much like an Alias, with a possible difference in number of new addressees.) Crocker ExpiresAugust 27, 2008May 4, 2009 [Page39]38] Internet-Draft EMail ArchitectureFebruaryOctober 2008RFC2822.To/.CCRFC2822.To/.CC: Set by - original Author These fields usually contain the original list of Recipient addresses.RFC2821.MailFromRFC2821.MailFrom: Set by -Author Source orMediatorSource ThisOriginator Because a Mailing List cancontainmodify theoriginal address to be notifiedcontent oftransmission issues, or the mailing list Actor can set it to containanew Notification address. Typically the valuemessage in any way, it isset to a new address, soresponsible for thatmailing list members and posters are not burdened with transmission-related Returns. RFC2821.RcptTo Set by - Mediator Author This containscontent; that is, it is an Author. As such, theaddress of a mailing list member. RFC2821.Received SetReturn Address is specified by- Mediator Dest A Mailing List Actor can record a Received header field, to indicate the transition from original posting to mailing list forwarding. The Actor can choose to havethemessage retainMailing List. Although it is plausible for theoriginal set of Received header fields or can chooseMailing List toremove them. Inre-use thelatter case it can ensure thatReturn Address employed by the originalReceived header fields are otherwise available, to ensure later accountability and diagnostic accessOriginator, notifications sent tothem.that address after a message has been processed by a Mailing List could be problematic. 5.4. Gateways A Gateway performs the basic routing and transfer work of message relaying, but it alsomay make anyis permitted to modify content, structure, address, orattribute modificationsattributes as needed to send the message into a messaging environment that operatesaccording tounder different standards or potentially incompatible policies. When a Gateway connects two differing messaging services, its role is easy to identify and understand. When it connects environments thathavefollow similar technicalsimilarity,standards, butcan have significantsignificantly different administrativedifferences,policies, it is easy tothink thatview a Gatewayisas merely an MTA. The critical distinction between an MTA and a Gateway is thatthe lattera Gateway can make substantive changes to amessage, in ordermessage to map between thestandards of two, different messaging services.standards. In virtually all cases, this mappingprocessresults in some degree of semantic loss. The challenge of Gateway design is to minimize this loss. Standardized gateways to Internet Mail are facsimile [RFC4143], voicemail [RFC3801], and MMS [RFC4356] A Gateway can set any identity field available toa regularan MUA.IdentitiesThese identities are typically relevant toGateways include: Crocker Expires August 27, 2008 [Page 40] Internet-Draft EMail Architecture February 2008Gateways: RFC2822.From: Set by - original Author Names andauthor(s)Author of the message content are retained. As for all original addressing information in the message, the Gateway can translate addressesin whatever way will allow themas required to continue to be useful in the target environment. Crocker Expires May 4, 2009 [Page 39] Internet-Draft EMail Architecture October 2008 RFC2822.Reply-To: Set by - original Author The Gateway SHOULD retain this information, if it isoriginallypresent. The ability to perform a successful reply by aGatewayedRecipient is a typical test of Gateway functionality. RFC2822.Sender: Set by - AuthorSourceOriginator or MediatorSourceOriginator This field can retain the original value or can be set to a new address.RFC2822.To/.CC/.BCCRFC2822.To/.CC/.BCC: Set by - original Recipient These fields usually retain their original addresses.RFC2821.MailFromRFC2821.MailFrom: Set by - AuthorSourceOriginator or MediatorSourceOriginator TheActoractor responsible forgatewayinghandling the message canchoose tospecify a new address to receive handling notices.RFC2822.Received Set by - Mediator Dest The Gateway can record a Received header field, to indicate the transition from the original posting environment to the new messaging environment.5.5. Boundary FilterOrganizations oftenTo enforce securityboundaries by subjectingboundaries, organizations can subject messages to analysis, for conformance withthe organization'sits safety policies. An example is detection of content classed as spam or a virus. AFilterfilter might alter the content, to render it safe, such as by removing content deemed unacceptable.TypicallyTypically, these actionswill result in the addition ofadd content to the message that records the actions. 6. Considerations 6.1. Security Considerations This document describes the existing Internet Mail architecture. It introduces no new capabilities. The security considerations of this deployed architecture are documented extensively in the technical specifications referenced by this document. These specifications cover classic security topics, such as authentication and privacy. For example, email transfer protocols can use standardized mechanisms for operation over authenticated and/or encrypted links, and message content has similar protection standards available. Examples of such mechanisms include SMTP-TLS [RFC3207], SMTP-Auth [RFC2554], OpenPGP [RFC4880], and S/MIME [RFC3851]. The core of the Internet Mail architecture does not impose any Crocker ExpiresAugust 27, 2008May 4, 2009 [Page41]40] Internet-Draft EMail ArchitectureFebruaryOctober 20086. Considerations 6.1. Security Considerations This documentsecurity requirements or functions on the end-to-end or hop-by-hop components. For example, it does notspecify any new Internet Mail functionality. Consequently it isrequire participant authentication and does notintendedattempt tointroduce anyprevent data disclosure. Particular message attributes might expose specific security considerations.However its discussionFor example, the blind carbon copy feature of therolesarchitecture invites disclosure concerns, as discussed in section 7.2 of [RFC2821] andresponsibilities for different mail service modules,section 5 of [RFC2822]. Transport of text or non- text content in this architecture has security considerations that are discussed in [RFC2822], [RFC2045], [RFC2046], and [RFC4288] as well as theinformation they create, highlightssecurity considerations present in theconsiderable degreeIANA media types registry for the respective types. Agents that automatically respond towhichemail raise significant securityissuesconsiderations, as discussed in [RFC3834]. Gateway behaviors affect end-to-end security services, as discussed in [RFC2480]. Security considerations for boundary filters arepresent when implementing any componentdiscussed in [RFC5228]. See section 7.1 of [RFC2821] for a discussion of the topic of origination validation. As mentioned in Section 4.1.4, it is common practice for components of this architecture to use the [RFC0791].SourceAddr to make policy decisions [RFC2505], although the address can be "spoofed". It is possible to use it without authorization. SMTP and Submission authentication [RFC2554], [RFC4409] provide more secure alternatives. The discussion of trust boundaries, ADMDs, actors, roles, and responsibilities in this document highlights the relevance and potential complexity of security factors for operation of an InternetIn addition, email transfer protocols can operate over authenticated and/or encrypted links,The core design of Internet Mail to encourage open andmessage content or authorship can be authenticatedcasual exchange of messages has met with scaling challenges, as the population of email participants has grown to include those with problematic practices. For example, spam, as defined in [RFC2505], is a by-product of this architecture. A number of standards track orencrypted.BCP documents on the subject have been issued. [RFC2505], [RFC5068], [RFC3685] 6.2. IANA Considerations This document has no actions for IANA. 6.3. Internationalization Because its origins date back to the use of ASCII, Internet Mail has had an ongoing challenge to support the wide range of necessary international data representations. For a discussion of this topic, see [MAIL-I18N]. Crocker Expires May 4, 2009 [Page 41] Internet-Draft EMail Architecture October 2008 7. References 7.1. Normative [RFC0791] Postel, J., "Internet Protocol", RFC 791, 1981 September. [RFC1034] Mockapetris, P., "Domain names - concepts and facilities", STD 13, RFC 1034, November 1987. [RFC1035] Mockapetris, P., "Domain names - implementation and specification", STD 13, RFC 1035, November 1987. [RFC1939] Myers, J. and M. Rose, "Post Office Protocol - Version 3", STD 53, RFC 1939, May 1996. [RFC2045] Freed, N. and N. Borenstein, "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies", RFC 2045, November 1996. [RFC2046] Freed, N. and N. Borenstein, "Multipurpose Internet Mail Extensions (MIME) Part Two: Media Types", RFC 2046, November 1996. [RFC2047] Moore, K., "MIME (Multipurpose Internet Mail Extensions) Part Three: Message Header Extensions for Non-ASCII Text", RFC 2047, November 1996.Crocker Expires August 27, 2008 [Page 42] Internet-Draft EMail Architecture February 2008[RFC2049] Freed, N. and N. Borenstein, "Multipurpose Internet Mail Extensions (MIME) Part Five: Conformance Criteria and Examples", RFC 2049, November 1996. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2181] Elz, R. and R. Bush, "Clarifications to the DNS Specification", RFC 2181, July 1997. [RFC2369] Neufeld, G. and J. Baer, "The Use of URLs as Meta-Syntax for Core Mail List Commands and their Transport through Message Header Fields", RFC 2369, July 1998. [RFC2645] "On-Demand Mail Relay (ODMR) SMTP with Dynamic IP Addresses", RFC 2645, August 1999. [RFC2821] Klensin, J., "Simple Mail Transfer Protocol", RFC 2821, April 2001. [RFC2822] Resnick, P., "Internet Message Format", RFC 2822, Crocker Expires May 4, 2009 [Page 42] Internet-Draft EMail Architecture October 2008 April 2001. [RFC2919] Chandhok, R. and G. Wenger, "List-Id: A Structured Field and Namespace for the Identification of Mailing Lists", RFC 2919, March 2001.[RFC3028] Showalter, T., "Sieve: A Mail Filtering Language", RFC 3028, January 2001.[RFC3192] Allocchio, C., "Minimal FAX address format in Internet Mail", RFC 2304, October 2001. [RFC3297] Klyne, G., Iwazaki, R., and D. Crocker, "Content Negotiation for Messaging Services based on Email", RFC 3297, July 2002. [RFC3458] Burger, E., Candell, E., Eliot, C., and G. Klyne, "Message Context for Internet Mail", RFC 3458, January 2003. [RFC3461] Moore, K., "Simple Mail Transfer Protocol (SMTP) Service Extension for Delivery Status Notifications (DSNs)", RFC 3461, January 2003. [RFC3501] Crispin, M., "Internet Message Access Protocol - Version 4rev1", RFC 3501, March 2003. [RFC3798] Hansen, T. and G. Vaudreuil, "Message DispositionCrocker Expires August 27, 2008 [Page 43] Internet-Draft EMail Architecture February 2008Notification", RFC 3798, May 2004. [RFC3834] Moore, K., "Recommendations for Automatic Responses to Electronic Mail", RFC 3834, August 2004. [RFC3864] Klyne, G., Nottingham, M., and J. Mogul, "Registration Procedures for Message Header Fields", RFC 3864, September 2004. [RFC4021] Klyne, G. and J. Palme, "Registration of Mail and MIME Header Fields", RFC 4021, March 2005. [RFC4288] Freed, N., Klensin, J., and J. Postel, "Media Type Specifications and Registration Procedures", BCP 13, RFC 4288, December 2005. [RFC4289] Freed, N., Klensin, J., and J. Postel, "Multipurpose Internet Mail Extensions (MIME) Part Four: Registration Procedures", BCP 13, RFC 4289, December 2005. [RFC4409] Gellens, R. and J. Klensin, "Message Submission for Mail", RFC 4409, April 2006. [RFC4550] Maes, S., , S., and Isode Ltd., "Internet Email to Support Crocker Expires May 4, 2009 [Page 43] Internet-Draft EMail Architecture October 2008 Diverse Service Environments (Lemonade) Profile", June 2006. [RFC5228] Showalter, T., "Sieve: A Mail Filtering Language", RFC 5228. [RFC5248] Hansen, T. and J. Klensin, "A Registry for SMTP Enhanced Mail System Status Codes", RFC 5248, June 2008. 7.2. Informative [MAIL-I18N] Internet Mail Consortium, "Using International Characters in Internet Mail", IMC IMCR-010, August 1998. [RFC0821] Postel, J., "Simple Mail Transfer Protocol", STD 10, RFC 821, August 1982. [RFC0822] Crocker, D., "Standard for the format of ARPA Internet text messages", STD 11, RFC 822, August 1982. [RFC1733] Crispin, M., "Distributed Electronic Models in IMAP4", December 1994. [RFC1767] Crocker, D., "MIME Encapsulation of EDI Objects", RFC 1767, March 1995. [RFC1985] De Winter, J., "SMTP Service Extension for Remote Message Queue Starting", August 1996. [RFC2033] Myers, J., "Local Mail Transfer Protocol", RFC 2033, October 1996. [RFC2142] Crocker, D., "Mailbox Names for Common services, Roles and Functions", RFC 2142, May 1997. [RFC2442] "The Batch SMTP Media Type", RFC 2442, November 1998. [RFC2480] Freed, N., "Gateways and MIME Security Multiparts", RFC 2480, January 1999. [RFC2505] Lindberg, G., "Anti-Spam Recommendations for SMTP MTAs", RFC 2505, February 1999. [RFC2554] Myers, J., "SMTP Service Extension for Authentication", RFC 2554, March 1999. [RFC3207] Hoffman, P., "SMTP Service Extension for Secure SMTP over Crocker Expires May 4, 2009 [Page 44] Internet-Draft EMail Architecture October 2008 Transport Layer Security", RFC 3207, February 2002. [RFC3685] Daboo, C., "SIEVE Email Filtering: Spamtest and VirusTest Extensions", RFC 3685, February 2004. [RFC3801] Vaudreuil, G. and G. Parsons,"","Voice Profile for Internet Mail - version 2 (VPIMv2)", RFC 3801, June 2004. [RFC3851] Ramsdell, B., Ed., "Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Message Specification", RFC 3851, July 2004. [RFC3885] Allman, E. and T. Hansen, "SMTP Service Extension for Message Tracking", RFC 3885, September 2004.Crocker Expires August 27, 2008 [Page 44] Internet-Draft EMail Architecture February 2008[RFC4142] Crocker, D. andG. Klyne, "Full-mode Fax Profile forG. Klyne, "Full-mode Fax Profile for Internet Mail: FFPIM", December 2005. [RFC4143] Toyoda, K. and D. Crocker, "Facsimile Using Internet Mail (IFAX) Service of ENUM", RFC 4143, November 2005. [RFC4356] Gellens, R., "Mapping Between the Multimedia Messaging Service (MMS) and InternetMail: FFPIM", December 2005.Mail", RFC 4356, January 2006. [RFC4880] Callas, J., Donnerhacke, L., Finney, H., Shaw, D., and R. Thayer, "OpenPGP Message Format", RFC 4880, November 2007. [RFC5068] Hutzler, C., Crocker, D., Resnick, P., Sanderson, R., and E. Allman, "Email Submission Operations: Access and Accountability Requirements", RFC 5068, BCP 134, Nov 2007. [Tussle] Clark, D., Wroclawski, J., Sollins, K., and R. Braden, "Tussle in Cyberspace: Defining Tomorrow's Internet", ACM SIGCOMM, 2002. Appendix A. Acknowledgements This work derives from a section indraft-hutzler-spamopsan early version of [RFC5068]. Discussion of theSourceOriginator actor role was greatly clarified during discussions in the IETF's Marid working group. Graham Klyne, Pete Resnick and Steve Atkins provided thoughtful insight on the framework and details of the originaldrafts.drafts, as did Chris Newman for the final versions, while also serving as cognizant Area Director for the document. Tony Hansen served as document shepherd, through the IETF process. Crocker Expires May 4, 2009 [Page 45] Internet-Draft EMail Architecture October 2008 Later reviews and suggestions were provided by Eric Allman, Nathaniel Borenstein, Ed Bradford, Cyrus Daboo, Frank Ellermann, Tony Finch, Ned Freed, Eric Hall,Tony Hansen,Willemien Hoogendoorn, Brad Knowles, John Leslie, Bruce Valdis Kletnieks, Mark E. Mallett, David MacQuigg, Alexey Melnikov, der Mouse, S. Moonesamy,Chris Newman,Daryl Odnert, Rahmat M. Samik-Ibrahim, Marshall Rose, Hector Santos, Jochen Topf, Greg Vaudreuil. Diligent early proof-reading was performed by Bruce Lilly. Diligent technical editing was provided by Susan Hunziker Index 10 A accountability 11 accountable 12-13 Actor Administrative1513 Author108 Consumer 14 Edge16 Gateway14Mediator 11Gateway 12 Originator1311 Recipient10 Relay 149 Return Handler119 Transit16 User 1614 Actors MHS 10 ADMD 11, 13-14, 18, 23, 29, 36 Administrative Actors 13 Administrative Management Domain 11 aMSA 29 Author 8, 10 author 33 B body-parts 22 bounce handler 9 boundary 14 C Consumer Actor 14 content 10, 12-13, 18, 22, 30 D delivery 4, 9-10, 12-13, 17, 22-23, 33, 35-36 Crocker ExpiresAugust 27, 2008May 4, 2009 [Page45]46] Internet-Draft EMail ArchitectureFebruaryOctober 2008MHS 12 Administrative Actors 15 Author 10 DDiscussion of document67 E Edge Actor1614 end-to-end 4 envelope 9, 12, 19, 22-23, 30, 35-36 ETRN 33 G Gateway12, 1410, 12 H header 22 hMSA 29 I Internet Mail 4 L LMTP 33 local-part 16 M Mail 4 Mailexchange 5User Agent 4 MailHandling Service 3From 35 Mail HandlingSystem 12Service 4, 10 MailTransferSubmission Agent311 MailUserTransfer Agent34 mailbox 35 MDA 35 MDN10 Mediator 119 message 6, 22 Message Disposition Notification109 MHS3, 124, 9-12, 19-20, 22-23 Actors1210 MSA 11, 29 MTA34, 14 boundary 14 MUA34, 13, 28-29 O ODMR 33 Originator1310-11 P posting 4, 9, 11, 19, 28-29, 33, 36 pull 33 Crocker Expires May 4, 2009 [Page 47] Internet-Draft EMail Architecture October 2008 push 33 R RcptTo 10 Receiver 10 Recipient 9-10, 35 recipient 33 relay 10Relay 14responsibility 29 responsible 12-13 Return address 35 Return Handler 9 role 9, 17 Author 8 Originator 11 Recipient 9 S SIEVE 22 SMTP 33 T transfer 10, 12-13 Transit Actor1614 transition 29 U UA3 User Actor 164 User Agent3 Crocker Expires August 27, 2008 [Page 46] Internet-Draft EMail Architecture February 20084 Author's Address Dave Crocker Brandenburg InternetWorking 675 Spruce Drive Sunnyvale, CA 94086 USA Phone: +1.408.246.8253 Email: dcrocker@bbiw.net Crocker ExpiresAugust 27, 2008May 4, 2009 [Page47]48] Internet-Draft EMail ArchitectureFebruaryOctober 2008 Full Copyright Statement Copyright (C) The IETF Trust (2008). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual Property The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org. Crocker ExpiresAugust 27, 2008May 4, 2009 [Page48]49] ----