[Ediint] Re: Structure of an Internet EDI MIME Message

Asger Smidt <asm@bizbrains.com> Thu, 24 September 2026 08:51 UTC

Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id D88AA31 for <ediint@ietf.org>; Thu, 24 Sep 2026 08:51:20 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=bizbrains.com header.s=selector2 header.b=JkOEHeky; arc=pass ("microsoft.com:s=arcselector10001:i=1"); dmarc=pass (policy=quarantine) header.from=bizbrains.com; spf=pass (mx.ietf.org: domain of asm@bizbrains.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=asm@bizbrains.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=aWfr7vnywcnJZfSnyxKgV+zJK8HRnlqKQuQR+BF5ZuVfYqUwi17X8jFYcePqfdgz/oepVvohCN/+wSX9oxSiI3v2o0dUf5HpgQ3nUZIEWFY+qrnOF3WuqOybnBAGfR3XdoLNDkbbGhqrqD1UTd47AjAHZ0E1Z2RyxWuU7IH4wu50F3Z6h2XWS1nbn0Z25OgjKb4/hswLxOHl/+rKiQ11InFsmRCLhTYoLptBivofQEJlR9AzNkU3anoSFRiFu4pwEOherK1B7OsZZdtVsMZJqQCKz/Zl48QulN9CLAi1ujtdE3oFWh+v76OGpKT5G9dyqPWJOLsJHOhAmXc77EyBbQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=s3iadnBXByneGOkMLVgm9E7R+3DAXcqWEn51Aeya5YM=; b=xVyjCyOuV7NjpPreIGryWiK12A719h6OQE81gpBiysT7l6uTYgYyJNpwe8kAuF3u1q1Qnzd4JJxinc6jJUK0O8scnkS1hFTAM0Uj9j+2P/GxRl8oaYZcRzPU1i7Fa6X5h9gKuxhJ1IWS+QPjpfMWYlVR7ld9jip3OGYV7nyotWISiPISDHvl1AOYAt3bpDvvHlMxVzkfZ3y2qd0TNNmcRdkxwQV1qDzrTv0/rMm+R9aHSAAC1kkuKnOYXYRotGOcQhB+9uxCpJTKoCmJDVE7ghZd+K+Fhdt0kuOg7jyzl6XhQJ9gXWEURNjx1Hb9pqy7S3dniZfUhyubobon7PLXYA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=bizbrains.com; dmarc=pass action=none header.from=bizbrains.com; dkim=pass header.d=bizbrains.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bizbrains.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=s3iadnBXByneGOkMLVgm9E7R+3DAXcqWEn51Aeya5YM=; b=JkOEHekyOHKHEjrudpve20CEHw4lmhQzT25R8Vm4iLKjnjGvdh2hgoJ61zOyH4HbDFMSNyf0hOLR64zwYrxF0+g38X1JcEtD5nLWNhRB1rq7KCHRsXSqQ6ZtPMLw7i/BOQWxc2Vy3jNVVTIHi1vOHSdMdh0CkEquErqELZI0CqI=
Received: from VI0P189MB2767.EURP189.PROD.OUTLOOK.COM (2603:10a6:800:255::22) by DB4P189MB2389.EURP189.PROD.OUTLOOK.COM (2603:10a6:10:3ff::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.18; Thu, 24 Sep 2026 08:51:11 +0000
Received: from VI0P189MB2767.EURP189.PROD.OUTLOOK.COM ([fe80::d6f3:f0ef:2a1:acd1]) by VI0P189MB2767.EURP189.PROD.OUTLOOK.COM ([fe80::d6f3:f0ef:2a1:acd1%3]) with mapi id 15.21.0451.014; Thu, 24 Sep 2026 08:51:11 +0000
From: Asger Smidt <asm@bizbrains.com>
To: Erik Wramner <erik@wramnerconsulting.se>, Marc Blanchet <marc.blanchet@viagenie.ca>
Thread-Topic: [Ediint] Re: Structure of an Internet EDI MIME Message
Thread-Index: AQHdS3kdX8np70+MIESlbabXconkR7bcYDGAgAALXgCAAAonAIAAAwkAgAABIYCAAMAZgIAAFi9ggAAHfgCAAA4s0A==
Date: Thu, 24 Sep 2026 08:51:11 +0000
Message-ID: <VI0P189MB2767B64021227BA8DF077774BE812@VI0P189MB2767.EURP189.PROD.OUTLOOK.COM>
References: <GV3P280MB12869D4AC2B73EDF50DA4D97BB832@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM> <DM4PR11MB6408261B4522F842B285BBF9CC832@DM4PR11MB6408.namprd11.prod.outlook.com> <GV3P280MB128654751637407E61611D44BB832@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM> <DM4PR11MB640837C6342E34415098AAEACC832@DM4PR11MB6408.namprd11.prod.outlook.com> <VI0P189MB2767E79AE4CAD0D33BC2EA25BE822@VI0P189MB2767.EURP189.PROD.OUTLOOK.COM> <GV3P280MB12862966CEE5FD38293C4748BB822@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM> <VI0P189MB2767E26EC9FA653572F58333BE822@VI0P189MB2767.EURP189.PROD.OUTLOOK.COM> <GV3P280MB12860721E6B8E3EDBA02BE8CBB822@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM> <6458B8B9-3993-465E-9FA3-CC043CD2D056@vigilsec.com> <GV3P280MB1286A19A8002BDD853FE2A90BB822@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM> <DM4PR11MB640875724989A7F3B04D9A20CC822@DM4PR11MB6408.namprd11.prod.outlook.com> <84B79A53-0A58-4502-9F53-69F5084697A5@viagenie.ca> <DM4PR11MB64081BB550B416539BCE50AACC822@DM4PR11MB6408.namprd11.prod.outlook.com> <58E5016F-38B8-46F8-A75E-7AB5E90BC419@viagenie.ca> <GV3P280MB128637A5B0C2B98835765274BB822@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM> <EA325266-68C2-4CA4-8BE5-DBA217753021@viagenie.ca> <GV3P280MB12864262F7C1EBB18F5AE9DBBB812@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM> <VI0P189MB2767B0A010A951C492C78FF2BE812@VI0P189MB2767.EURP189.PROD.OUTLOOK.COM> <GV3P280MB12867AC6A5EB6FDE6CA22A28BB812@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM>
In-Reply-To: <GV3P280MB12867AC6A5EB6FDE6CA22A28BB812@GV3P280MB1286.SWEP280.PROD.OUTLOOK.COM>
Accept-Language: en-US, da-DK
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-codetwoprocessed: true
x-codetwo-clientsignature-inserted: true
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: VI0P189MB2767:EE_|DB4P189MB2389:EE_
x-ms-office365-filtering-correlation-id: 938a5257-2735-4a25-eec4-08df1a18fba7
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|4022899009|23010399003|38070700021|5023799004|3023799007|6133799003|10067099003|56012099006|4143699003|11063799006|22082099003|18002099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:VI0P189MB2767.EURP189.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(4022899009)(23010399003)(38070700021)(5023799004)(3023799007)(6133799003)(10067099003)(56012099006)(4143699003)(11063799006)(22082099003)(18002099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: bizbrains.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: VI0P189MB2767.EURP189.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 938a5257-2735-4a25-eec4-08df1a18fba7
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Sep 2026 08:51:11.3491 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 1d18dc41-f751-481c-9c8a-18d938ca3807
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ZT1NMBKKfvf/C5SG/OtnXgGZSMtThNm9X+r26xgYbDHrVZb1q1lm1iZzFZejGpOusM5+uFUMaXhRbAcVyj5ZSw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4P189MB2389
X-Spamd-Bar: /
Message-ID-Hash: DILEY3VXPZTWAOLG7EWUEZTQXXAYOQKG
X-Message-ID-Hash: DILEY3VXPZTWAOLG7EWUEZTQXXAYOQKG
X-MailFrom: asm@bizbrains.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "ediint@ietf.org" <ediint@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Ediint] Re: Structure of an Internet EDI MIME Message
List-Id: "Electronic Data Interchange-Internet Integration: Discussions related to modernizing RFC 4130, which defines the AS2 (Applicability Statement 2) messaging standard" <ediint.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ediint/5y10htqCG9SY5xNTzvthY9KNl0k>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ediint>
List-Help: <mailto:ediint-request@ietf.org?subject=help>
List-Owner: <mailto:ediint-owner@ietf.org>
List-Post: <mailto:ediint@ietf.org>
List-Subscribe: <mailto:ediint-join@ietf.org>
List-Unsubscribe: <mailto:ediint-leave@ietf.org>

>All MIME content types SHOULD be supported with unknown types treated as "application/octet-stream". The following MUST be supported...

Well, yes, except that both "supported" and "treated as" are meaningless terms in this context, because the protocol does not "treat" different content types in different ways. The ONLY way the protocol interacts with the content type is if the implementer specifically makes it do so, and I am fairly certain that the spec makes no mention of how different content types should be "treated".

I imagine the original text was born out of the common usage of the protocol at the time, with no particular thought given to whether or not it actually made sense in the long run. As Marc pointed out, just in the application/ category there are now 1808 registered content types, and more will be coming. It seems incredibly pointless to try to force any kind of awareness of the content type into the protocol itself. As I said earlier it can make sense for a given implementation to enforce content type restrictions based on the capabilities of the receiving system, but that should not affect the protocol itself other than perhaps mentioning that this is allowed, if indeed we think it should be allowed. I think it should be, again because we cannot take the specifics of all current and future content types into account. With something like EDIFACT, which contains established acknowledgement messages, there is no need for the protocol to be involved in the message flow other than acting as the transport layer, but for other content types the MDN is the only ACK/NACK available in the flow. I believe that is the reason the "Failure: unsupported format" error message MUST be supported (chapter 8.5.3), precisely to give implementers this option.

-----Original Message-----
From: Erik Wramner <erik@wramnerconsulting.se> 
Sent: Thursday, 24 September 2026 09.36
To: Asger Smidt <asm@bizbrains.com>; Marc Blanchet <marc.blanchet@viagenie.ca>
Cc: ediint@ietf.org
Subject: RE: [Ediint] Re: Structure of an Internet EDI MIME Message

Agreed, but the old standard did point out a few required content types explicitly. We could write this for the new standard:

--
All MIME content types SHOULD be supported with unknown types treated as "application/octet-stream". The following MUST be supported...
--

Alternatively, we could say that all content types not interfering with AS/2 (i.e., none of the container types) MUST be supported as binary data. The key to get across is that this should work as any other transmission protocol sending messages/files from A to B in binary form and it is an added bonus if the new standard is as close to the old one as possible except where it actually needs to change something. In my view this already works in most cases, so it does not need fixing.

-Erik

-----Original Message-----
From: Asger Smidt <asm@bizbrains.com> 
Sent: Thursday, 24 September 2026 09:26
To: Erik Wramner <erik@wramnerconsulting.se>; Marc Blanchet <marc.blanchet@viagenie.ca>
Cc: ediint@ietf.org
Subject: RE: [Ediint] Re: Structure of an Internet EDI MIME Message

If I may weigh in here, my perspective is that AS2 is a transport protocol, completely separate from the payload it transports. I don't see that it makes sense to talk about which content types the protocol supports, because in my view the protocol and the payload do not interact with each other in any way. I think any protocol implementation that is hard coded to accept only certain content types is a very poor implementation indeed. I will happily admit that there are legitimate scenarios where it can make sense to limit the incoming content types through configuration, but that is not related to the protocol itself, but rather to the capabilities of the system behind the implementation that is ultimately receiving the data.

So, to sum up my position:
Technically I think the protocol should support all content types. However, given the non-interaction between the payload and protocol, the only form of "support" the protocol has to provide is to not explicitly filter out content types other than those on a specific list. In other words, as an implementer all I have to do to provide support for a given content type is to not explicitly block it, meaning I actually have to do nothing at all. As such, having the spec talk about what I MUST and SHOULD support is kind of a moot point, because I have no intention of going out of my way to make my AS2 framework less useful by deliberately restricting it from receiving certain content types. Never mind that there is no guarantee that the stated content type actually matches the payload. It is not up to the transport protocol to determine that however, its job is just to facilitate the transport of the payload from party A to party B in a secure manner.

/Asger

-----Original Message-----
From: Erik Wramner <erik@wramnerconsulting.se> 
Sent: Thursday, 24 September 2026 07.49
To: Marc Blanchet <marc.blanchet@viagenie.ca>
Cc: ediint@ietf.org
Subject: [Ediint] Re: Structure of an Internet EDI MIME Message

>Great for you. That is an implementation choice. The point here is about the proposed sentence: "Although all MIME content types SHOULD be supported, the following MIME content types MUST be supported:".
>I suggested to remove "Although all MIME content types SHOULD be supported" as it is way too much. If an implementation supports everything, then fine. This is not what I'm talking about.

Well, it is what I am talking about. Interoperability. If our AS/2 customers connect to someone else, they want to be able to send their files. They want to trust that it works. If they can't do that, they will fall back to SFTP or some other protocol that does the job. Having this SHOULD in the standard increases the likelihood that a new server implements this correctly and just works. "It works if everyone has our server" or "products from vendor A, B or C" makes the standard moot.

HTTP is not limited to a few content types; it supports them all. SFTP is not limited to a few content types (albeit it is not based on MIME, it is a main competitor to AS/2 in practice). I don't see why AS/2 which builds on HTTP should be more restricted.

-Erik
_______________________________________________
Ediint mailing list -- ediint@ietf.org
To unsubscribe send an email to ediint-leave@ietf.org