Dear IETF Community, My name is Debra Petta, and I serve as the primary AS2 interoperability Test Lead and as a Senior Software Engineer at Drummond Group, the organization that has coordinated interoperability and conformance testing for AS2 implementations
for over two decades. Prior to my role at Drummond, I was the lead AS2 Development Engineer at Cleo Communications, and I’ve been working directly with AS2 for over 25 years. As many of you know, RFC 4130, which defines AS2 under the EDIINT framework, was published in 2005 and has not been updated since that time. While the protocol remains in widespread use across supply chains and industry sectors, its specification
has fallen behind in several key areas—particularly around security (e.g., deprecated algorithms, FIPS compliance) and implementation ambiguities that have been clarified informally through years of interoperability testing. Over the upcoming months, I plan to engage with our AS2 user base and vendor community to:
I’m reaching out to kindly ask for guidance, specifically,
We recognize and respect the rigor of the IETF process and want to ensure this work is done collaboratively and in alignment with the community’s expectations. Thank you in advance for any direction or support that you can provide. I’d be happy to provide additional context or participate in any discussions that would help move this effort forward. Sincerely,
|