> ## Documentation Index > Fetch the complete documentation index at: https://docs.oximail.ch/llms.txt > Use this file to discover all available pages before exploring further. # RFC compliance > The standards OxiMail implements, grouped by surface: JMAP, mail transport, email authentication, calendaring, contacts, legacy protocols, and security. OxiMail is built RFC-first: a method or protocol feature is implemented from the specification text, with the RFC's own examples as tests, before anything else. This page maps the standards each surface implements. It is a directory, not a conformance certificate — the per-page documentation states behaviour precisely, including the few deliberate, documented deviations (each marked where it occurs). ## JMAP | RFC | What | Where | | -------------------------------------------------- | ------------------------------------------------------------------------------ | ------------------------------------------------ | | [RFC 8620](https://www.rfc-editor.org/rfc/rfc8620) | JMAP Core: session, batched requests, back-references, `/changes`, blobs, push | [JMAP Core](../developer/jmap-core) | | [RFC 8621](https://www.rfc-editor.org/rfc/rfc8621) | JMAP Mail: Mailbox, Email, Thread, Identity, EmailSubmission, VacationResponse | [Mail](../developer/jmap-mail) | | [RFC 9007](https://www.rfc-editor.org/rfc/rfc9007) | JMAP MDN: `MDN/send`, `MDN/parse` (read receipts) | [Mail](../developer/jmap-mail#read-receipts-mdn) | | [RFC 8887](https://www.rfc-editor.org/rfc/rfc8887) | JMAP over WebSocket | [Chat](../developer/jmap-chat) | | draft-ietf-jmap-calendars | JMAP Calendars | [Calendar](../developer/jmap-calendar) | | [RFC 9610](https://www.rfc-editor.org/rfc/rfc9610) | JMAP Contacts | [Contacts](../developer/jmap-contacts) | | [RFC 9670](https://www.rfc-editor.org/rfc/rfc9670) | JMAP Sharing: Principals, ShareNotification | [Sharing](../developer/jmap-sharing) | | [RFC 9661](https://www.rfc-editor.org/rfc/rfc9661) | JMAP Sieve: SieveScript management | [Rules & Sieve](../operator/sieve-rules) | | draft-ietf-jmap-filenode | JMAP File Storage | [Files](../developer/jmap-files) | | [RFC 8984](https://www.rfc-editor.org/rfc/rfc8984) | JSCalendar (the event/task object model) | [Calendar](../developer/jmap-calendar) | | [RFC 9553](https://www.rfc-editor.org/rfc/rfc9553) | JSContact (the card object model) | [Contacts](../developer/jmap-contacts) | ## Mail format and transport | RFC | What | Where | | -------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------- | ------------------------------------------------ | | [RFC 5321](https://www.rfc-editor.org/rfc/rfc5321) / [5322](https://www.rfc-editor.org/rfc/rfc5322) | SMTP and the Internet Message Format (in-house parser, strict + lenient parse-but-report) | [SMTP layer](../architecture/oximail-smtp) | | [RFC 6531](https://www.rfc-editor.org/rfc/rfc6531) / [6532](https://www.rfc-editor.org/rfc/rfc6532) | SMTPUTF8 / internationalized headers | mediated per destination | | [RFC 6152](https://www.rfc-editor.org/rfc/rfc6152), [1870](https://www.rfc-editor.org/rfc/rfc1870), [3030](https://www.rfc-editor.org/rfc/rfc3030) | 8BITMIME, SIZE, CHUNKING/BDAT | [SMTP layer](../architecture/oximail-smtp) | | [RFC 8689](https://www.rfc-editor.org/rfc/rfc8689) | REQUIRETLS | [SMTP layer](../architecture/oximail-smtp) | | [RFC 3464](https://www.rfc-editor.org/rfc/rfc3464) / [3461](https://www.rfc-editor.org/rfc/rfc3461) | Delivery Status Notifications | [SMTP layer](../architecture/oximail-smtp) | | [RFC 8098](https://www.rfc-editor.org/rfc/rfc8098) | Message Disposition Notifications (the report format behind the JMAP MDN surface) | [Mail](../developer/jmap-mail#read-receipts-mdn) | | [RFC 5546](https://www.rfc-editor.org/rfc/rfc5546) / [6047](https://www.rfc-editor.org/rfc/rfc6047) | iTIP / iMIP calendar scheduling by mail | [Groupware](../operator/groupware) | | [RFC 5228](https://www.rfc-editor.org/rfc/rfc5228) | Sieve filtering (in-house interpreter; extensions listed on the Sieve page) | [Rules & Sieve](../operator/sieve-rules) | ## Email authentication and transport security Implemented in the in-house `oximail-auth` crate, consumed by the SMTP layer; the operator view is the [email authentication page](../operator/email-auth-security). | RFC | What | | --------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------- | | [RFC 7208](https://www.rfc-editor.org/rfc/rfc7208) | SPF | | [RFC 6376](https://www.rfc-editor.org/rfc/rfc6376) | DKIM (sign + verify, From/To/Subject oversigning) | | [RFC 7489](https://www.rfc-editor.org/rfc/rfc7489) | DMARC (with [RFC 7372](https://www.rfc-editor.org/rfc/rfc7372) status codes) | | [RFC 8617](https://www.rfc-editor.org/rfc/rfc8617) | ARC (verify + seal) | | [RFC 8601](https://www.rfc-editor.org/rfc/rfc8601) | Authentication-Results | | [RFC 8461](https://www.rfc-editor.org/rfc/rfc8461) / [8460](https://www.rfc-editor.org/rfc/rfc8460) | MTA-STS / TLS-RPT | | [RFC 7672](https://www.rfc-editor.org/rfc/rfc7672) | DANE for SMTP | | SRS | Sender Rewriting Scheme on forward | ## Legacy protocols All documented on the [legacy protocols page](../operator/legacy-protocols). | RFC | What | | ------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------- | | [RFC 9051](https://www.rfc-editor.org/rfc/rfc9051) | IMAP4rev2 (+ CONDSTORE/QRESYNC, [RFC 7162](https://www.rfc-editor.org/rfc/rfc7162)) | | [RFC 4791](https://www.rfc-editor.org/rfc/rfc4791) / [RFC 5545](https://www.rfc-editor.org/rfc/rfc5545) | CalDAV / iCalendar | | [RFC 6352](https://www.rfc-editor.org/rfc/rfc6352) / [RFC 6350](https://www.rfc-editor.org/rfc/rfc6350) | CardDAV / vCard | | [RFC 6578](https://www.rfc-editor.org/rfc/rfc6578) | Collection synchronization (sync-collection) | | [RFC 5804](https://www.rfc-editor.org/rfc/rfc5804) | ManageSieve | | [RFC 6638](https://www.rfc-editor.org/rfc/rfc6638) | CalDAV scheduling — **not implemented**; scheduling is iTIP-by-mail (deliberate) | ## Security and authentication | RFC | What | Where | | --------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------ | | [RFC 6750](https://www.rfc-editor.org/rfc/rfc6750) | Bearer tokens (incl. §2.3 query-param carve-out for EventSource) | [JMAP Core](../developer/jmap-core) | | [RFC 9449](https://www.rfc-editor.org/rfc/rfc9449) | DPoP device-bound tokens (nonce, resource proofs) | [JMAP Core](../developer/jmap-core) | | WebAuthn | Passkeys (feature-gated) | — | | ACME ([RFC 8555](https://www.rfc-editor.org/rfc/rfc8555)) | Certificate issuance and renewal | [TLS & ACME](../operator/tls-acme) | | [RFC 8446](https://www.rfc-editor.org/rfc/rfc8446) | TLS 1.3 on every listener (mail ports included), with the hybrid `X25519MLKEM768` group offered first and classic X25519 as fallback | [TLS & ACME](../operator/tls-acme#post-quantum-key-exchange) | Where OxiMail deviates from a specification, it is deliberate, documented at the point of behaviour, and biased the same way every time: **strict on what we accept as valid, honest about what we advertise, loud about what we cannot do** — never a silent partial implementation.