<?xml version="1.0" encoding="utf-8"?>
<!-- name="GENERATOR" content="github.com/mmarkdown/mmark Mmark Markdown Processor - mmark.miek.nl" -->
<rfc version="3" ipr="trust200902" docName="draft-levine-rfc6409bis-02" submissionType="IETF" category="std" xml:lang="en" xmlns:xi="http://www.w3.org/2001/XInclude" updates="6409" indexInclude="true" consensus="true">

<front>
<title abbrev="6409 update">Update to Message Submission for Mail</title><seriesInfo value="draft-levine-rfc6409bis-02" stream="IETF" status="standard" name="Internet-Draft"></seriesInfo>
<author initials="J." surname="Levine" fullname="John Levine"><organization>Standcore LLC</organization><address><postal><street></street>
</postal><email>standards@standcore.com</email>
</address></author><date/>
<area>Application</area>
<workgroup></workgroup>
<keyword>email</keyword>

<abstract>
<t>This memo adds updated advice for e-mail message submission.</t>
<t>This memo also offers guidance to software that constructs a message
envelope from a message's headers prior to submission.</t>
</abstract>

</front>

<middle>

<section anchor="introduction"><name>Introduction</name>
<t>Message submission <xref target="RFC6409"></xref> prepares a message for <xref target="I-D.ietf-emailcore-rfc5321bis"></xref>
SMTP mail transmisson.  This memo provides updated advice for submission agents.</t>
<t>This memo also offers guidance to software that constructs a message
envelope from a message's headers prior to submission.</t>
</section>

<section anchor="conventions-used-in-this-document"><name>Conventions Used in This Document</name>
<t>Examples use the 'example.net' domain.</t>
<t>The key words &quot;MUST&quot;, &quot;MUST NOT&quot;, &quot;REQUIRED&quot;, &quot;SHALL&quot;, &quot;SHALL NOT&quot;, &quot;SHOULD&quot;, &quot;SHOULD NOT&quot;, &quot;RECOMMENDED&quot;, &quot;NOT RECOMMENDED&quot;, &quot;MAY&quot;, and &quot;OPTIONAL&quot; in this document are to be interpreted as described in BCP 14 <xref target="RFC2119"></xref> <xref target="RFC8174"></xref> when, and only when, they appear in all capitals, as shown here.</t>
</section>

<section anchor="interaction-with-smtp-extensions"><name>Interaction with SMTP Extensions</name>
<t>The following table lists Standards Track and Experimental SMTP
extensions published since <xref target="RFC6409"></xref> that are applicable to message
submission,</t>

<aside><t>Do we need to add anything else to this table?</t>
</aside>
<table anchor="exts"><name>Recent SMTP extensions applicable to submission </name>
<thead>
<tr>
<th>Keyword</th>
<th>Name</th>
<th>Submission</th>
<th>Reference</th>
</tr>
</thead>

<tbody>
<tr>
<td>MT-PRIORITY</td>
<td>Priority Message Handling</td>
<td>MAY</td>
<td><xref target="RFC6710"></xref></td>
</tr>

<tr>
<td>SMTPUTF8</td>
<td>Internationalized email address</td>
<td>SHOULD</td>
<td><xref target="RFC6531"></xref></td>
</tr>

<tr>
<td>RRVS</td>
<td>Require Recipient Valid Since</td>
<td>MAY</td>
<td><xref target="RFC7293"></xref></td>
</tr>

<tr>
<td>REQUIRETLS</td>
<td>Require TLS</td>
<td>MAY</td>
<td><xref target="RFC8689"></xref></td>
</tr>
</tbody>
</table></section>

<section anchor="message-modifications"><name>Message Modifications</name>
<t>As described in <xref target="RFC6409" sectionFormat="of" relative="#" section="8"></xref>, sites MAY modify submissions to ensure compliance with standards and
site policy.  This section describes additional modifications
that are often considered useful.</t>

<section anchor="adjust"><name>Adjust Recipient Headers</name>
<t>If the message contains a Bcc header field, the MSA SHOULD delete it
to avoid leaking the address to other recipients.</t>
<t>If the message contains neither a To nor a Cc header field, the MSA MAY
add a Bcc header field containing no additional information, or containing
only an empty address group.
While <xref target="I-D.ietf-emailcore-rfc5322bis"></xref> allows messages that have
no recipient headers, MUAs often display them poorly.</t>
</section>
</section>

<section anchor="generate"><name>Generating SMTP Commands from Message Header Fields</name>
<t>Some systems extract sender and recipient addresses from
a <xref target="I-D.ietf-emailcore-rfc5322bis"></xref> header section
without other information in a mail submission protocol, or otherwise
generate SMTP commands from Internet Message Format header fields
when such a message is initially created.</t>
<t>There are problems with this approach.  For example, there
have been repeated problems with proper handling of &quot;bcc&quot; copies and
redistribution lists when information that conceptually belongs to
the mail envelope is not separated early in processing from header
field information (and kept separate).</t>
<t>It is recommended that an MUA provide its MSA
with an envelope separate from the message itself.
However, if the envelope is not supplied, the envelope SHOULD be
generated as follows:</t>

<ol>
<li><t>Each recipient address from a TO, CC, or BCC header field SHOULD
be copied to a RCPT command  This includes any
addresses listed in a <xref target="I-D.ietf-emailcore-rfc5322bis"></xref> &quot;group&quot;.<br />
Any BCC header fields
SHOULD then be removed from the header section.  Once this
process is completed, the remaining header fields SHOULD be
checked to verify that at least one TO or CC header field
remains.  If none do, then a BCC header field with no additional
information SHOULD be inserted.</t>
</li>
<li><t>The return address in the MAIL command SHOULD, if possible, be
   derived from the system's identity for the submitting (local)
   user, and the &quot;From:&quot; header field otherwise.  If there is a
   system identity available, it SHOULD also be copied to the Sender
   header field if it is different from the address in the From
   header field.  (Any Sender header field that was already there
   SHOULD be removed.)  Systems may provide a way for submitters to
   override the envelope return address, but may want to restrict
   its use to privileged users.  This will not prevent mail forgery,
   but may lessen its incidence.</t>
</li>
</ol>
<t>Submission based on message header field information alone
   MUST NOT be used to gateway a message from a foreign (non-SMTP) mail
   system into an SMTP environment.  Additional information to construct
   an envelope must come from some source in the other environment,
   whether supplemental header fields or the foreign system's envelope.</t>
<t>Attempts to gateway messages using only their header &quot;To&quot; and &quot;Cc&quot;
   fields have repeatedly caused mail loops and other behavior adverse
   to the proper functioning of the Internet mail environment.  These
   problems have been especially common when the message originates from
   an Internet mailing list and is distributed into the foreign
   environment using envelope information.  When these messages are then
   processed by a header-section-only remailer, loops back to the
   Internet environment (and the mailing list) are almost inevitable.</t>
</section>

<section anchor="security-considerations"><name>Security Considerations</name>
<t>This memo does not change the security considerations in <xref target="RFC6409"></xref>.</t>
</section>

<section anchor="iana-considerations"><name>IANA Considerations</name>
<t>This memo makes no reqeuests to IANA.  TBD</t>
</section>

<section anchor="acknowledgments"><name>Acknowledgments</name>
<t>We thank John Klensin, Pete Resnick, and TBD for helpful comments.</t>
</section>

</middle>

<back>
<references><name>Normative References</name>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml-ids/reference.I-D.ietf-emailcore-rfc5322bis.xml"/>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.6409.xml"/>
</references>
<references><name>Informative References</name>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml-ids/reference.I-D.ietf-emailcore-rfc5321bis.xml"/>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2119.xml"/>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.6531.xml"/>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.6710.xml"/>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7293.xml"/>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8174.xml"/>
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8689.xml"/>
</references>

<section anchor="major-changes-to-rfc-6409"><name>Major Changes to RFC 6409</name>

<ul>
<li><t>Add extensions SMTPUTF8, MT-PRIORITY, RRVS, REQUIRETLS to <xref target="exts"></xref></t>
</li>
<li><t>Add <xref target="adjust"></xref></t>
</li>
<li><t>Import <xref target="generate"></xref> from RFC 5321</t>
</li>
</ul>
</section>

</back>

</rfc>
