[Emailcore] Re: Your (Roman's) DISCUSS on draft-ietf-emailcore-as and status of the document

Ken Murchison <murch@fastmail.com> Sat, 19 September 2026 12:09 UTC

Received: from fhigh-a1-smtp.messagingengine.com (fhigh-a1-smtp.messagingengine.com [103.168.172.152]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id CD7BF31; Sat, 19 Sep 2026 12:09:12 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=fastmail.com header.s=fm1 header.b=LzxFswf5; dkim=pass header.d=messagingengine.com header.s=fm1 header.b=fPAL46RV; dmarc=pass (policy=none) header.from=fastmail.com; spf=pass (mx.ietf.org: domain of murch@fastmail.com designates 103.168.172.152 as permitted sender) smtp.mailfrom=murch@fastmail.com
Received: from phl-compute-06.internal (phl-compute-06.internal [10.202.2.46]) by mailfhigh.phl.internal (Postfix) with ESMTP id 0219D14000DF; Sat, 19 Sep 2026 08:09:06 -0400 (EDT)
Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-06.internal (MEProxy); Sat, 19 Sep 2026 08:09:06 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.com; h= cc:cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm1; t=1789819745; x=1789906145; bh=vgV2XIAfJ5 XMYnueTNJeMYZAT7cI4C/t/277otD0cUo=; b=LzxFswf5sH/PG7fZnDou7ZvvkI V/q7/kukQN+UOakzlGoOoB57XC7HngANOqX/NvFP6gLUhI4D3twYGweLzimZU8Cg tmyaOtyuxQFei1QPUYrKFkCHlolj6sh2R/zoNGuP+aFf/62YhIMRFQpJOQVj68Cp ODw9TvNRlOvLOzX7kNXXWrmLxvew07Nnh6aKs/S4hoMejrmpthZb6gITNASMGlht spYgrvUcvihaFWVFgWTJP3LPXKJjBlpOfNtvlnFQck/blH7Quixqn55x5Z5wRswk YGg4+CVcYpIgXMwscp61uGNMtwou8i6h7fUKjrHTsUMdfCYGVzVJS7m50OWg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1789819745; x=1789906145; bh=vgV2XIAfJ5XMYnueTNJeMYZAT7cI4C/t/27 7otD0cUo=; b=fPAL46RVtYDbnWjDT0uNqffhzyeK7yCT9b9EEBLirPiOLT+jL0E +smIGI++EtDfrFGZgEQUQkmozA43+UVMYnqvMQbEPzDTJr06VFjv+9Ka9YuHjO+S 3LSJz5JfkLVXZMcuj8118RS1q6OB5mNWu1+aHH5a6eCjqHCW18E6+4Rvu1xwt9+7 0i7MHHFnYWbWbs4YDe4up9fT0FwMZj3nzlOhZDM5YiAl8ESUKLBDiGwBUgteSaDm 15y/i9gzdOxAWsAo6LItL7+drCBr27NMe0IDmZHt/XUd27a3zZtVzLjcgqHFv19h lIPz/G/6bJGUg5bY3RjO9mf14yim2D/xS2A==
X-ME-Sender: <xms:YXuualWajK3ELyEj9J2hNkkiiyhtppA2t7cA3XBIh6yTNUQwFJYWdQ> <xme:YXuuatNvvKd_unajAk5DU7GXmj-P_JdlsCYFz4SVX-MA_dCSYwnI-jN2EwWezqGiI iMpHrfWra-wvj8ihc-vFV9kduFScqs1N_UuNJ_eag5-Vl109Mc>
X-ME-Received: <xmr:YXuuavApoFZ4Ra3aWsa6ti41D0TTuWK7lv13xEltX3f8eohWrInB3qYKWWnp87te3Gc>
X-ME-Proxy-Cause: dmFkZTE9nRaF02U1KkBTBp34vd0cWuLRCzPwAWQcTlGN6l7TO2U9ggXVIegfmAveWeVHbi /2AX6iiLUaP98oyQ08vDCTG92+AjtL6dpkchD6OQBcqC+hy/g4PcSvE6CINv/Id8thgZxG AKN6FVEcWk0Pv408kMKwTy9s09aSmA7BEKSby6iosjf3bAcH03VNi84KgpFs1JDdMVr3O2 V9umcwOQuHeIlezi+hFowuZUQ/iEiyzDo6xwXlcYU6kNNjIIKq8pMnvGBGoPO7wwirnOeS Lu2sTw+zRJ2WNaVNzk0+vWkvjypeVveibKBwevcebwWOBQhpYmjOoNWd4X+1WEcFLdBhgz T6c4OYkZZxW0hEUZ4fSRe5dqiVslrUN3BkSLgOzY2PII0tcWVBCbiDeNT1kVfGy1oXkeNA Yg4UxUmOouwMrei37mWru8KSggLGcrCMKavi8rwoBxxOBIoxM3SGSOtPzJBtd964MYpZwM 5hY82jdpc5/O2ZmWHuwOtHo7h6mrUt0S8og8dEU/2veOmWKUANhxoF/KY68tuOyLETrgT6 HVAGxJ82Tsgq0lqZvqHpFw3vRvBBi/aB48V9oIZUqax4564gqqvx1SziIY5L1OJTXDTjkT mJ7WiHvTq1xAWR8t6BqNiaW4CHs2KjmosxR4gogITiaYcbbbSgp74fHwOg2A
X-ME-Proxy: <xmx:YXuuaic5rCSgJY5MGZpk70etWwNwQG8BQy5w2mC5eNHvyypjdxhb7g> <xmx:YXuuamN9ik-w3rYL9pG_Ylsv7dNMdYbPh0iHpqby8UTMF-CfFESdYQ> <xmx:YXuuaqLjIOQZh5xYDr-CnQBT2CdGmisOX57bz9azo1f5zZ3IJpSojA> <xmx:YXuuauJ1lOSa4lFIjWtmOSkE1kEiB6xknDxUy0J3742i1LUBcQukWQ> <xmx:YXuuarDG1wTW0ZsazzrON_QLoYyQjmCCxdbBr8VsI0f_VR_nYtvdQQvz>
Feedback-ID: ibf914243:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 19 Sep 2026 08:09:04 -0400 (EDT)
Content-Type: multipart/alternative; boundary="------------rkO00PWRl90LtMY2JVB002hT"
Message-ID: <fa7c454e-e634-4721-a1b0-4ef72fc59fac@fastmail.com>
Date: Sat, 19 Sep 2026 08:09:02 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: John C Klensin <john-ietf@jck.com>, Roman Danyliw <rdd@cert.org>
References: <74E293D986C9FA8AAF037DD1@PSB>
Content-Language: en-US
From: Ken Murchison <murch@fastmail.com>
Organization: Fastmail US LLC
In-Reply-To: <74E293D986C9FA8AAF037DD1@PSB>
X-Spamd-Bar: -
Message-ID-Hash: GI3CQKK2OH4DLQMLUG6W7JT2JUSQBHG5
X-Message-ID-Hash: GI3CQKK2OH4DLQMLUG6W7JT2JUSQBHG5
X-MailFrom: murch@fastmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: emailcore@ietf.org, emailcore-chairs@ietf.org, draft-ietf-emailcore-as@ietf.org, Andrew Newton <andy@hxr.us>, last-call@ietf.org, iesg@ietf.org
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Emailcore] Re: Your (Roman's) DISCUSS on draft-ietf-emailcore-as and status of the document
List-Id: EMAILCORE proposed working group list <emailcore.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/emailcore/CwgrseWDKEbdqqeu9QSifIJApT4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/emailcore>
List-Help: <mailto:emailcore-request@ietf.org?subject=help>
List-Owner: <mailto:emailcore-owner@ietf.org>
List-Post: <mailto:emailcore@ietf.org>
List-Subscribe: <mailto:emailcore-join@ietf.org>
List-Unsubscribe: <mailto:emailcore-leave@ietf.org>

Roman, John,

On 9/18/26 3:27 PM, John C Klensin wrote:
> (2) The BCP versus Applicability Statement question is a bit more
> complicated because the boundary is not clear and because the IESG
> has not raised the issue when several previous documents were
> published as BCPs that probably should have been ASs.  Neither, IIR,
> have IETF participants raised that issue in a memorable way.   In any
> event, the decision to do this document as an AS goes back to the
> WG's chartering and the initial outline was done on that basis.
> Changing it to a BCP would require some rewriting (with the risks of
> getting things wrong in the process) so one question is whether, even
> if a BCP classification were more appropriate, it would be worth the
> time, energy, and risk.
>
> More important, the arguments for retaining it as an AS are quire
> strong.  The second attachment is extracted from a discussion among
> the editors, WG Chairs, and Andy (as AD) and is one summary of the
> arguments.  Ken also took the initiative to have Claude prepare a
> summary of the topic, with the same conclusion about leaving it as an
> AS.  I assume he can forward either that analysis, or his summary of
> it, to you if that would be helpful.

Re: Claude

I asked Claude to read RFC 2026 and our draft and give me his opinion on 
the A/S vs BCP question.  I further asked him to ignore the fact that 
the draft uses "applicability statement" in several places.  His analysis:

Having actually read the TOC and body content rather than just the
self-declaration, my own read agrees it functions as an Applicability
Statement — but it's a closer call than the document's own framing suggests.

Why it reads as AS, not BCP:

RFC 2026 §3.2 defines an AS as a document that takes one or more
existing Technical Specifications and says how/when they apply,
including marking individual provisions required, recommended, or
elective. That's almost exactly the shape of this draft's core sections:

- §2.4 doesn't invent anything — it takes named, already-standardized
extensions (STARTTLS/RFC 3207, 8BITMIME/RFC 6152, PIPELINING/RFC 2920,
SMTPUTF8) and classifies each as MUST or SHOULD for senders/receivers.
That's a profile over existing TSs, the textbook AS move.

- §6.5's "SMTP-senders MUST use confidentiality if it is available and
accepted by the receiver" is the same pattern applied to TLS: not a new
protocol requirement, but a rule for when an existing mechanism must be
invoked.

- The document's own dependencies (5321bis, 5322bis) are the TSs being
profiled; this draft doesn't redefine SMTP or IMF syntax itself.

A BCP, by contrast, is supposed to be the output of a
community-deliberation on operational/procedural matters — not a spec,
not a profile of specs, but an agreed practice (registration policy,
operational conduct, IETF process). Nothing here is that; every
recommendation is tied back to "which existing spec provision applies,
and how strictly."

Where it blurs a little:

§4.1's local-part case-sensitivity guidance ("most implementations don't
distinguish case... maximum interoperability is achieved by...") isn't
really "apply TS X in circumstance Y" — it's advice about how to behave
given that real-world implementations diverge from what the base spec
technically permits. That's closer to accumulated operational wisdom
than applicability-of-a-spec. But it's still explicitly interpreting a
specific provision of 5321bis/5322bis (local-part case-sensitivity), so
it stays tethered to a TS rather than standing alone as community
practice the way a BCP would.

My opinion: it's correctly an AS. The document's center of mass —
extension MUST/SHOULD tables, TLS usage rules, address-literal handling
— is squarely "how do existing specs apply here," which is the AS's
defining job. It brushes up against BCP territory in a couple of
interoperability-folklore passages, but not enough to change the
document's fundamental character.

-- 
Kenneth Murchison
Staff Software Developer
Fastmail US LLC
IETF MailMaint Co-Chair