I just did a little checking for you over a log of what people try to enter in to an email field in a form:
<5: 1056713 (none or fake)
5-9: 6052
10-19: 226676
20-29: 274956
30-39: 8912
40-49: 196 (from here on they all seem to be either fake or badly formed)
50-59: 29
60-69: 11
70-79: 2
> 80: 0
That's probably not very representative, but it gives you an idea of what people tend to enter in to email fields if you are not too strict about what you accept in the form itself.
So, valid addresses across this sample appear to be between 5 and 39 characters, with the shortest valid address in the log at 8 characters. It's technically possible to have both shorter and longer ones but the chances of those being actual addresses are probably quite low.
All that said, I'd stick with the RFC anyway.