IETF advances AS2 protocol modernization to secure future B2B video data exchange

Updating the AS2 protocol is critical for the stability of global B2B supply chains that increasingly rely on automated, secure data interchange for content licensing and metadata distribution. By removing legacy cryptographic vulnerabilities and standardizing discovery mechanisms, the IETF is ensuring that the protocol remains a viable alternative to fragmented RESTful APIs. For the streaming industry, this modernization secures the foundation for high-volume file transfers and automated partner onboarding, reducing the risk of security incidents in the MFT (Managed File Transfer) stack. Industry observers should monitor the Q4 2026 Working Group Last Call as indicative of the final transition timeline for certified vendors like AWS, IBM, and Boomi.

The modernization of RFC 4130 comes as the B2B data exchange market faces increasing pressure to balance legacy reliability with contemporary security standards. According to Drummond, many major global retailers including Walmart and Amazon still mandate Drummond-certified AS2 solutions for their trading partners to ensure interoperability and compliance. In December 2025, Drummond certified 14 B2B solutions from global vendors such as Amazon Web Services, IBM, and Axway in its 4Q25 test event, signaling continued investment in the protocol despite its age (per Drummond, December 2025).

Recent market research highlights that while API-based data exchange is growing rapidly, the structured B2B exchange market remains robust. The global B2B data exchange market was valued at approximately $4.8 billion in 2025 and is projected to reach $12.6 billion by 2034, driven by a 14.1% CAGR in cloud-based deployment modes (per DataIntelo, March 2026). This growth is largely fueled by the banking, finance, and healthcare sectors, though the streaming and telecommunications vertical remains a key contributor due to the high sensitivity and volume of exchanged metadata.

Security remains the primary driver for these IETF updates. Professional reporting indicates that 59% of organizations involved in managed file transfers (MFT) reported a security incident within the past 12 months, and multiple MFT platforms faced critical exploits throughout 2024 and 2025 (per Kiteworks, June 2026). The IETF’s shift toward modernizing AS2's cryptographic baseline—moving away from 2005-era standards to align with TLS 1.3 and advanced S/MIME—aims to mitigate these vulnerabilities without disrupting the established certification and compliance ecosystems that global supply chains have relied on for over two decades.