Network Working Group ArntInternet Engineering Task Force (IETF) A. GulbrandsenIntended Status: Proposed StandardRequest for Comments: 6858 February 2013 Updates: 3501 Category: Standards Track ISSN: 2070-1721 SimplifiedPOP/IMAPPOP and IMAP Downgrading for Internationalized Emaildraft-ietf-eai-simpledowngrade-07.txtAbstract This document specifies a method for IMAP and POP servers to serve internationalized messages to conventional clients. The specification is simple, easy to implement, and provides only rudimentary results. Status ofthisThis Memo ThisInternet-Draftissubmitted toan Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available infull conformance withSection 2 of RFC 5741. Information about theprovisionscurrent status ofBCP 78this document, any errata, andBCP 79.how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc6858. Copyright Notice Copyright (c)20122013 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet- Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft expires in January 2013. Internet-draft August 2012 Abstract This document specifies a method for IMAP and POP servers to serve internationalized messages to conventional clients. The specification is simple, easy to implement and provides only rudimentary results.1. OverviewIt may happen that aA conventional IMAP or POP clientopensmay open a mailbox containing internationalizedmessages,messages or may even attempt to read internationalized messages, forinstanceinstance, when a user has both internationalized and conventionalMUAs.Mail User Agents (MUAs). Some operations cannot be performed by conventional clients. Most importantly, an internationalized message usually contains at least one internationalized address, so address-based operations areonlyrarely possible. This includes displaying the addresses,replying,replying to messages, and the processing of most types of address-based signature orsecurity processing. Still,security. However, the sender's name,themessage subject, bodytextof text, and attachments can easily be displayed, so a helpfulIMAP/POPIMAP or POP server may prefer toprovide access to what it candisplay as much of the message as possible, rather than hide the message entirely. This document specifies a way to present such messages to the client. It values simplicity of implementation over fidelity of representation, since implementing a high-fidelity downgrade algorithm such as the one specified in a companion document [RFC6857] is likely more work than implementing proper UTF-8 support for[RFC5721]POP [RFC6856] and/or[RFC5738].IMAP [RFC6855]. The server is assumed to be internationalizedinternally,internally and to store messages that are internationalized messages natively. When it needs to present an internationalized message to a conventional client,itthe server synthesizes a conventional message containing most of the information and presents the "surrogate message". This specification modifies the base IMAP specification [RFC3501] by relaxing a requirement that(the "synthetic message").sizes be exact and adding a reporting requirement as discussed in Section 3 below. 2. InformationpreservedPreserved andlostLost Thesyntheticsurrogate message is intended to convey the most important information to the user. Where information is lost, the user shouldseeconsider the messageasincomplete rather than modified. Thesyntheticsurrogate message is not intended to convey any information to the client software that would require or enable it to apply special handling to the message. Client authors who wish to handle internationalized messages are encouraged to implement[RFC5738]. Internet-draft August 2012 Upper casePOP [RFC6856] and/or IMAP [RFC6855] support for UTF-8. Uppercase letters in examplesrepresents non-ASCII.represent non-ASCII characters. example.com is a plaindomain,domain; EXAMPLE.com represents a non-ASCII domain in the .comtop- leveltop-level domain.2.12.1. EmailaddressesAddresses Each internationalized email address in the header fields listed below is replaced with an invalid email address whose display-name tells the user what happened. The format of the display-name is explicitly unspecified. Anythingwhichthat tells the user what happened is good. Anythingwhichthat produces an email addresswhichthat might belong to someone else is bad. Given an internationalized address "Fred Foo <fred@EXAMPLE.com>", an implementation may choose to render ite.g.as one of these examples: "fred@EXAMPLE.com" <invalid@internationalized-address.invalid> Fred Foo <invalid@internationalized.invalid> internationalized-address:; fred:;(TheThe .invalid top-level domain is reservedby [RFC2606], thereforeas a Top Level DNS Name [RFC2606]; therefore, the first two examples are syntactically valid, but they will never belong to anyone. Note that the display-name oftenwill need [RFC2047] encoding.)needs encoding (see the Message Header Extensions document [RFC2047]). The affected header fields areBcc, Cc, From, Reply-To, Resent-Bcc, Resent-Cc, Resent-From, Resent-Sender, Resent-To, Return-Path, Sender"Bcc:", "Cc:", "From:", "Reply-To:", "Resent-Bcc:", "Resent-Cc:", "Resent-From:", "Resent-Sender:", "Resent-To:", "Return-Path:", "Sender:", andTo."To:". Any addresses present in other header fields, such asReceived,"Received:", are not regarded as addresses by this specification.2.22.2. MIMEparametersParameters Any MIME parameter [RFC2045] (whether in the message header or abodypartbody part header)whichthat cannot be presentedas-isto the client exactly as it appears in the incoming message is silently excised. Given a field such as Content-Disposition: attachment; filename=FOO the field is presented as Content-Disposition: attachmentInternet-draft August 2012 2.3 "Subject"2.3. Subject Field If the Subject field cannot be presentedas-is,to the client exactly as it appears in the incoming message, the server presents a representation encoded as specified in[RFC2047]. 2.4RFC 2047. 2.4. Remainingheader fieldsHeader Fields Any header fieldwhichthat cannot be presented to theclientclient, evenafterwith the modifications listed insections 2.1-2.3Sections 2.1-2.3, is silently excised. 3.IMAP-specific detailsIMAP-Specific Details IMAP allows clients to retrieve the message size without downloadingit,the message, using RFC822.SIZE, BODY.SIZE[] and so on. The IMAP specification [RFC3501] requires that the returned size be exact. This specification relaxes thatrequirement:requirement. When a conventional client requests size information for a message, the IMAP server is permitted to return size information for the internationalized message, even though thesynthetic message'ssize of the surrogate message differs. When an IMAP servercarries outperforms downgrading as part of generating FETCH responses, it reports which messages weresynthesisedsynthesized using a response code and attendant UID (Unique Identifier) set. This can be helpful to humans debugging the server and/or client. C: a UID FETCH 1:* BODY.PEEK[HEADER.FIELDS(To From Cc)] S: 1 FETCH (UID 65 [...] S: 2 FETCH (UID 70 [...] S: a OK [DOWNGRADED 70,105,108,109] Done The message-set argument to DOWNGRADED contains UIDs. Note that DOWNGRADED does not necessarily mention all the internationalized messages in the mailbox. In the example above, we know that UID 65 does not contain internationalized addresses inFrom, Tothe "From:", "To:", andCc."Cc:" fields. Itmaymay, for example, contain an internationalizedSubject, etc."Subject:". 4.POP-specific detailsPOP-Specific Details The number of lines specified in the TOP command(see [RFC1939])[RFC1939] refers to thesyntheticsurrogate message. The message size reportedby e.g.by, for example, LIST may refer to either the internationalized or thesyntheticsurrogate message.Internet-draft August 20125. Security Considerations If the internationalized message uses any sort ofsignature,signature that covers header fields, thesynthetic message'ssignature of the surrogate message almost certainly isinvalid.invalid and may be invalid in other cases. This is a necessary limitation of displaying internationalized messages inconventionallegacy clients, sincethe client doesthose clients do not support internationalizedaddresses.header fields. These cases are discussed in more detail in the POP or IMAP Downgrade document [RFC6857]. Even though invalid, these signatures should not be removed from the surrogate message, to preserve as much of the information as possible from the original message. If any excised information is significant, then that information does not arrive at the recipient. Notably, theMessage-Id, In-Reference-To"Message-Id:", "In-Reference-To:", andReferences"References:" fields may be excised, which might cause a lack of context when the recipient reads the message. Some POP or IMAP clients, such as Fetchmail, download messages and delete theversionversions on the server. This may lead to permanent loss of information when the only remaining version of a message is thesyntheticsurrogate message. Other clients cache messages for a very long time, even across client upgrades, such as the stock Android client. When such a client is internationalized, care must be taken so that itwilldoes not use an oldsyntheticsurrogate message from its cache rather than retrieve the real message from the server. 6.Acknowledgements Claudio Allocchio, Ned Freed, Kazunori Fujiwara, Ted Hardie, John Klensin, Barry Leiba, John Levine, Alexey Melnikov, Chris Newman, Joseph Yee and the originator of rule 12 in [RFC1925] helped with this document. 7.IANA ConsiderationsTheIANAis requested to addhas added DOWNGRADED to theIMAP"IMAP ResponseCodeCodes" registry.8.7. References 7.1. Normative References [RFC1939] Myers,JJ. and M. Rose, "Post Office Protocol - Version 3", STD 53, RFC 1939, May 1996. [RFC2045] Freed, N. and N. Borenstein, "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies", RFC 2045, November 1996.Internet-draft August 2012[RFC2047] Moore, K., "MIME (Multipurpose Internet Mail Extensions) Part Three: Message Header Extensions for Non-ASCII Text", RFC 2047, November 1996. [RFC2606] Eastlake,D.D., 3rd and A. Panitz, "Reserved Top Level DNS Names", BCP 32, RFC 2606, June 1999. [RFC3501] Crispin,"Internet Message Access ProtocolM., "INTERNET MESSAGE ACCESS PROTOCOL -VersionVERSION 4rev1", RFC 3501,JuneMarch 2003.9.7.2. Informative References [RFC1925] Callon, R.,"Fundamental Truths of Networking","The Twelve Networking Truths", RFC 1925, April 1 1996.[RFC5721] Gellens, R., and C.[RFC6855] Resnick, P., Ed., Newman,"POP3C., Ed., and S. Shen, Ed., "IMAP Support for UTF-8", RFC5721,6855, February2010. [RFC5738] Resnick, P. and C.2013. [RFC6856] Gellens, R., Newman,"IMAPC., Yao, J., and K. Fujiwara, "Post Office Protocol Version 3 (POP3) Support for UTF-8", RFC5738, March 2010. 10.6856, February 2013. [RFC6857] Fujiwara, K., "Post-Delivery Message Downgrading for Internationalized Email Messages", RFC 6857, February 2013. 8. Acknowledgements Claudio Allocchio, Ned Freed, Kazunori Fujiwara, Ted Hardie, John Klensin, Barry Leiba, John Levine, Alexey Melnikov, Chris Newman, and Joseph Yee. This specification was inspired by the principle stated in Rule 12 of "The Twelve Networking Truths" [RFC1925]. Author's Address Arnt Gulbrandsen Schweppermannstr. 8 D-81671 Muenchen Germany Fax: +49 89 4502 9758Email:EMail: arnt@gulbrandsen.priv.noInternet-draft August 2012 (RFC Editor: Please delete everything after this point) Open Issues Should Kazunori Fujiwara's downgrade document also mention DOWNGRADED? RFC Editor: IF 5721 and/or 5738 have been superseded by new RFCs at this time, please change the references to those RFCs throughout this document. Well, except in the previous sentence. I'm such a pedant. RFC Editor: I do not know the difference between that and which. Will and shall outnumber me too. Please fix all that. Thank you. Changes since -00 Added a rule to handle Subject Removed the sentence about unknown:; Terminology fixes Changes since -01 Nits from Joseph Yee. Clarified the address rendering and added non-.invalid examples, based on suggestions from Kazunori Fujiwara. Many changes from Barry Leiba: Simplified and better terminology, reformatted examples, more references, etc. Specified POP TOP. A bit of a no-op specification. Mention BODY.SIZE[] as well as RFC822.SIZE. Wave hands so BODY.SIZE[1] sneaks past. http://rant.gulbrandsen.priv.no/good-bad-rfc fwiw Changes since -02 Added the DOWNGRADED response code, since both Barry and Alexey wants it. Internet-draft August 2012 Changes since -03 Added/changed text in response to appsdir reviews from Ted Hardie and Claudio Allocchio. Changes since -04 Closed two open issues; the interest in them was clearly negligible. "Updates: 3501" because of the SIZE relaxation. Security considerations about download-and-delete and long-term caching. Bring on the WGLC! Changes since -05 Text changes from John Klensin Changes since -06 Text changes from Barry Leiba. I hate case sensitivity in human language, but right now I need to pack my suitcases, not argue.