RFC 5598: Internet Mail Architecture

Conceptual overview of the entire internet mail system: MSA, MTA, MDA, MUA roles and their interactions.
Alaa
By Alaa
SMTPedia documents email infrastructure end to end: SMTP standards from the RFC archive, delivera...
8 min read Updated Jul 22, 2026 57 views
RFC 5598
Internet Mail Architecture
Current standard
Published
July 2009
Supersedes
First in series
SMTP relevance
High
↗ Read on rfc-editor.org

What this RFC defines

RFC 5598 is a conceptual overview of the entire internet mail system. It defines and names the functional roles: the MUA (Mail User Agent, your email client), the MSA (Mail Submission Agent, port 587), the MTA (Mail Transfer Agent, the relay servers), and the MDA (Mail Delivery Agent, which places mail into mailboxes). It is a map, not a protocol specification.

Where you see it in practice

When an email deliverability consultant talks about the MUA-MSA-MTA-MDA chain, they are using the terminology from RFC 5598. When your ESP’s documentation distinguishes between submission (port 587) and relay (port 25), the conceptual separation comes from this RFC. It is the document that gives email infrastructure its shared vocabulary.

How it connects to other RFCs

RFC 5598 is an architectural overview that sits above all the protocol RFCs. It references RFC 5321 (SMTP), RFC 5322 (message format), and the MIME suite as the protocols that implement the architecture it describes. It is informational rather than standards-track, meaning it documents existing practice rather than defining new requirements.

Current status

RFC 5598 is a current informational RFC, published July 2009. It has not been superseded and remains the standard reference for email architecture terminology. Anyone designing or describing an email system should read it to use consistent vocabulary.

The Internet Mail Architecture

RFC 5598 published Dave Crocker Internet Mail Architecture document in July 2009. It is not a protocol standard; it is a taxonomy of the entities that participate in email delivery: MUA (Mail User Agent, the client), MSA (Mail Submission Agent, port 587), MTA (Mail Transfer Agent, relays), MDA (Mail Delivery Agent, final delivery), and MS (Message Store). It also introduces the concepts of author, sender, receiver, and various trust boundaries that shape how policies apply.

Why the vocabulary matters

Reading RFC 5598 clarifies why certain policies apply in certain places. SPF and DKIM are MTA-level authentication checks; DMARC alignment operates on the RFC 5322 From header that the MUA generates; DSN reports go to the return path that the MSA rewrote. Each protocol operates at a specific point in the delivery chain, and confusion about which agent handles which task is a common source of misconfiguration. When troubleshooting, mapping the actual mail flow onto the RFC 5598 vocabulary usually clarifies the problem.

Reading as prerequisite

Many later RFCs implicitly assume familiarity with RFC 5598 vocabulary. When RFC 7489 (DMARC) talks about “receiver” behavior, it means the receiving MTA specifically, not the ultimate MUA. When RFC 6376 (DKIM) talks about “author signing”, it means the domain of the RFC 5322 From header, not the envelope MAIL FROM. If you are diving into modern mail RFCs and finding the terminology dense, RFC 5598 is a short (roughly 60 pages) prerequisite read.

Quick Reference

RFC 5598 (July 2009), authored by Dave Crocker, defines the Internet Mail Architecture: the vocabulary and role definitions used across every subsequent email RFC. Introduces terms like MUA (Mail User Agent), MSA (Mail Submission Agent), MTA (Mail Transfer Agent), MDA (Mail Delivery Agent), MRA (Mail Retrieval Agent), and their handoffs. Not a wire protocol; a conceptual map. Essential prerequisite for reading modern authentication, deliverability, and routing RFCs which use this vocabulary throughout.

RFC 5598 at a glance

AspectDetail
PurposeEstablish common vocabulary and role definitions for Internet mail
AuthorDave Crocker
TypeInformational (conceptual framework, not wire protocol)
LengthApproximately 60 pages
Key conceptActor and role separation (Author, MUA, MSA, MTA, MDA, MRA, Recipient)
Referenced byEvery modern email RFC that discusses paths or actors
PublishedJuly 2009

The core actors and roles

ActorFull nameRole
AuthorAuthorThe person or process that creates a message
MUAMail User AgentClient software the Author uses (Outlook, Apple Mail, Thunderbird, webmail)
MSAMail Submission AgentServer that accepts newly authored mail from MUAs (typically port 587)
MTAMail Transfer AgentServer that relays mail between systems (typically port 25)
MDAMail Delivery AgentComponent that places mail into the recipient’s mailbox (Postfix local, Cyrus deliver, Dovecot deliver)
MRAMail Retrieval AgentServer that provides access to stored mail (IMAP, POP3)
RecipientRecipientThe person or process for whom the message is intended
MediatorMediatorActor that re-injects mail (mailing list, forwarder, alias expander)

Standard mail flow through the actors

Standard Internet mail path Author | v MUA (Outlook, Apple Mail, Thunderbird) | Authenticates and submits via SMTP AUTH v MSA (submission server, port 587) | Performs sanity checks; adds headers (Received, Message-ID) | Signs with DKIM if configured | Relays via SMTP v MTA (outbound relay) | Queries MX records for recipient domain | Establishes SMTP with recipient MTA v MTA (recipient side, port 25) | Applies SPF, DKIM, DMARC, ARC, content filtering | Places message in local delivery queue v MDA (local delivery) | Writes to mailbox (Maildir, mbox, database) v Mailbox storage ^ | IMAP or POP3 v MRA (retrieval server) ^ | MUA fetches v MUA (recipient’s client) ^ | RecipientKey handoff points: Author → MUA: Message composition MUA → MSA: SMTP AUTH submission (port 587) MSA → MTA: Internal relay MTA → MTA: External relay (port 25) MTA → MDA: Local delivery MDA → Storage: Mailbox write Storage → MRA: Retrieval interface MRA → MUA: Recipient fetch

Mediators: mailing lists, forwarders, aliases

Mediators re-inject mail with modified headers. A mailing list receives a message from an Author, may modify the Subject (adding [ListName]), the From (rewriting for ARC-friendly forwarding), or the body (adding List-* headers and footers), then re-transmits to all subscribers. This modification breaks DKIM signatures and creates the classic “mailing list breaks DMARC” problem that ARC was designed to solve. Mediators are the reason ARC exists.

Common confusions around actor vocabulary

Confusing MSA and MTA. MSA is the submission endpoint (port 587 typically) with SMTP AUTH; MTA is the relay endpoint (port 25) with anti-spam checks. Historically one server handled both; modern operational practice separates them. Confusing the two leads to misconfiguration (open relays, AUTH-less submission, or over-strict submission).
Confusing MDA and MRA. MDA writes messages into the recipient’s mailbox (local delivery). MRA presents the mailbox to the recipient’s MUA over IMAP or POP3. Same operational domain, different roles. Some systems merge them; others separate.
Assuming Author = MUA. The Author is the human; the MUA is the software. In automated systems (bulk sender platforms), the Author might be an application generating messages via API, with a “virtual MUA” role fulfilled by the platform’s submission code. Distinguishing them matters for authentication design: MUAs authenticate to MSAs; automated senders authenticate via API to platforms.
Ignoring Mediator role in DMARC design. Mediators (mailing lists, forwarders) modify messages in transit, breaking DKIM. DMARC policy must account for this or legitimate list traffic gets rejected. ARC (RFC 8617) is the mechanism that lets Mediators preserve authentication verdicts across their re-injection.
Reading modern RFCs without RFC 5598 vocabulary. Many current RFCs (RFC 8601 Authentication-Results, RFC 7489 DMARC, RFC 8617 ARC) use MSA/MTA/MDA/MRA terminology without redefining. Reading these RFCs cold without RFC 5598 background produces frequent “what does MSA mean here?” confusion.
Standards using RFC 5598 vocabulary
  • RFC 5321: SMTP (uses MTA extensively)
  • RFC 5322: Message Format (uses Author)
  • RFC 4409: Submission (defines MSA role)
  • RFC 6376: DKIM (references MSA, MTA)
  • RFC 7489: DMARC (references full actor chain)
  • RFC 8617: ARC (Mediator handling)
  • RFC 8601: Authentication-Results (verdicts across actors)
SMTPedia companion guides

Frequently asked questions

Should I read RFC 5598 before other email RFCs?

If you are diving into modern mail RFCs (authentication, deliverability, ARC), yes. RFC 5598 is a short (60 pages) informational document that establishes vocabulary used throughout. Reading it once means every subsequent RFC references to MSA, MTA, MDA, MRA, Mediator make immediate sense instead of requiring inference from context.

What is the difference between MSA and MTA?

MSA (Mail Submission Agent) is the endpoint MUAs submit new messages to; typically port 587 with SMTP AUTH required. MTA (Mail Transfer Agent) is the relay endpoint that receives from other MTAs; typically port 25. Historically one server handled both; modern operations separate them. Separating provides security (submission requires AUTH; relay applies anti-spam), scaling (different load profiles), and monitoring (different failure modes).

Are Mediators the same as MTAs?

No. An MTA relays a message unchanged (only adding trace headers). A Mediator re-injects the message with modifications: added Subject prefixes, rewritten From, added footers, new List-* headers. Mailing list managers (Mailman, Sympa) are Mediators; simple forwarding aliases can be either MTA or Mediator depending on implementation. The distinction matters because Mediators break DKIM signatures while pure MTAs preserve them.

Where does a webmail interface fit in this architecture?

A webmail interface is a browser-based MUA that also incorporates MRA functionality via the server backend. When you compose in Gmail’s web interface, the interface is the MUA. When it displays your inbox, the backend fulfills the MRA role. The mail-server-side of Gmail combines MSA, MTA, MDA, and MRA into a single platform; the web interface is what you see.

Is RFC 5598 still current?

Yes. RFC 5598 is informational and its terminology has not been superseded. It has been referenced by every subsequent mail architecture and authentication RFC. The vocabulary continues in use unchanged. For deployment specifics of individual roles, consult protocol-specific RFCs (RFC 5321 for MTA, RFC 4409 for MSA, etc.); RFC 5598 remains the architectural map.


About the Author

Alaa - SMTPedia author

Alaa · LinkedIn

Email infrastructure specialist with 8+ years of hands-on experience in SMTP, deliverability, and email verification. I’ve configured and troubleshot mail systems across Postfix, Exchange, and cloud relays, managed IP reputation and warmup campaigns, and built verification pipelines processing millions of addresses. My work spans DNS authentication (SPF, DKIM, DMARC, BIMI), bounce handling, blocklist monitoring, and compliance frameworks including CAN-SPAM and GDPR. I write every article on SMTPedia to give email professionals, developers, and marketers the accurate, RFC-grounded reference they need.


About SMTPedia

SMTPedia is an independent email industry reference covering SMTP, IMAP, POP3, email deliverability, marketing platforms, DNS authentication, and email verification. Every article is researched from official provider documentation, IETF RFCs, and industry best practices. Settings and configurations are verified quarterly.

We are cited as a source by ChatGPT, Microsoft Copilot, and thousands of email professionals worldwide. Learn more about our editorial process.