Email Protocols: Evolution, Security, and Interoperability

Abstract

Email remains one of the most enduring and indispensable applications of the Internet, facilitating communication across personal, corporate, and governmental domains. At the core of this system are three foundational protocols Simple Mail Transfer Protocol (SMTP), Post Office Protocol version 3 (POP3), and Internet Message Access Protocol (IMAP) which collectively enable the sending, retrieval, and synchronization of electronic messages. Over the past four decades, these protocols have undergone significant evolution, shaped by hundreds of RFCs and extensions that address growing demands for scalability, security, and interoperability. Yet, despite their maturity, deployment realities reveal persistent challenges. Security mechanisms such as TLS encryption, DNSSEC, and authentication frameworks (SPF, DKIM, DMARC) have been introduced to mitigate threats like spam, phishing, and spoofing, but adoption remains uneven across providers. Similarly, interoperability issues ranging from fragmented implementations to incomplete IPv6 support continue to hinder seamless communication. This review synthesizes the evolution, security concerns, and deployment practices of SMTP, POP3, and IMAP, offering a holistic perspective on their current state and future trajectory. By bridging theoretical specifications with real-world practices, the paper aims to inform researchers, practitioners, and policymakers about the strengths, limitations, and opportunities for advancing secure and interoperable email systems.