view Side-By-Side changes
draft-ietf-idn-idna-03.txtdraft-ietf-idn-idna-04.txt CiscoJuly 20,November 8, 2001 Paul Hoffman Expires in six months IMC & VPNC Adam M. Costello UC Berkeley Internationalizing Host NamesInin Applications (IDNA) Status of this Memo This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC2026. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. AbstractThe current DNS infrastructure does not provide aUntil now, there has been no standard wayto use internationalizedfor host names(IDN).to use characters outside the ASCII repertoire. This document describes a mechanism called IDNA thatrequires no changes to any DNS server or resolver that will allowenables internationalized host names, that is, host namesto bethat use characters drawn from a much larger repertoire. (The "D" in the name originally stood for "domain", but the work is actually focused on host names, so the word "host" is used throughout this document.) 1. Introduction IDNA works byend usersallowing applications to use certain ASCII name labels (beginning withchanges onlya special prefix) toapplications. It allows flexibility for user input and display, and assures that host names that haverepresent non-ASCIIcharacters arename labels. Lower-layer protocols need notsentbe aware of this; therefore IDNA does not require changes to any infrastructure. In particular, IDNA does not require any changes to DNSserversservers, resolvers, orresolvers. 1. Introduction Inprotocol elements, because thediscussion ofASCII name service provided by the existing DNS is entirely sufficient. This document does not require any applications to conform to IDNA, but applications can elect to use IDNA in order to support IDNsolutions, awhile maintaining interoperability with existing infrastructure. Adding IDNA support to an existing application entails changes to the application only, and leaves room for flexibility in the user interface. A great deal of the discussion of IDN solutions has focused on transition issues and how IDN will work in a world where not all of the components have been updated.Earlier proposed solutionsOther proposals would require that user applications, resolvers, and DNS serverstobe updated in order for a user to use an internationalized host name.Instead of this requirement forRather than require widespread updating of all components,the current proposal is thatIDNA requires only user applications to be updated; no changes are needed to the DNS protocol or any DNS servers or the resolvers on user's computers. This document is being discussed on the ietf-idna@mail.apps.ietf.org mailing list. To subscribe, send a message to ietf-idna-request@mail.apps.ietf.org with the single word "subscribe" in the body of the message.1.1 Design philosophy Many proposals for IDN protocols have required that DNS servers be updated2 Terminology [[ Editor's note: the author's are considering changing "host name" tohandle internationalized host names. Because of this,"domain name" throughout theperson who wanted to use an internationalized host name haddocument after discussing this further with the DNS experts. ]] The key words "MUST", "SHALL", "REQUIRED", "SHOULD", "RECOMMENDED", and "MAY" in this document are to besure that their request went to a DNS server that was updated for IDN. Further, that server could only send queriesinterpreted as described in RFC 2119 [RFC2119]. A code point is an integral value associated with a character in a coded character set. Unicode [UNICODE] is a coded character set containing tens of thousands of characters. A single Unicode code point is denoted by "U+" followed by four toother serverssix hexadecimal digits, while a range of Unicode code points is denoted by two hexadecimal numbers separated by "..", with no prefixes. ASCII means US-ASCII, a coded character set containing 128 characters associated with code points in the range 0..7F. Unicode is an extension of ASCII: it includes all the ASCII characters and associates them with the same code points. The term "LDH code points" is defined in this document to mean the code points associated with ASCII letters, digits, and the hyphen-minus; thathad been updatedis, U+002D, 30..39, 41..5A, and 61..7A. "LDH" is an abbreviation forIDN because"letters, digits, hyphen". A host label is an individual part of a host name. Host labels are usually shown separated by dots; for example, thequeries contain new protocol elements to differentiate IDNhost nameparts from current"www.example.com" is composed of three hostparts.labels: "www", "example", and "com". Inaddition, these proposals require that resolvers mustIDNA, not all text strings can beupdated to use the new protocols,host labels. A string can be a host label if andin most casesonly if theapplications would needToASCII operation (see section 4) does not fail when applied tobe updated as well. These proposals would require that the application protocolsit. (The zero-length root label thatuseis implied in hostnamesnames, asprotocol elements to change. Thisdescribed in [STD13], isdue to the assumptions and requirements madenot considered a label inthose protocols about the charactersthis specification.) An "ACE label" is defined in this document to be a host label thathave always been usedcontains only ASCII characters but represents a label containing non-ASCII characters (ACE stands for "ASCII-compatible encoding"). Internationalized hostnames,labels generally contain non-ASCII characters, but for every host label that cannot be directly represented in ASCII there is an equivalent ACE label. The conversion of host labels to and from theencoding of those characters. Other proposals for IDN protocols do not require changes to DNS servers but still require changes to most application protocolsACE form is specified in section 4. The "ACE prefix" is defined in this document tohandle the new names. Updating all (or evenbe asignificant percentage)string of ASCII characters that appears at theexisting serversbeginning of every ACE label. It is specified inthe world will be difficult, to say the least. Updating applications, application gateways, and clients to handle changes to the application protocolssection 5. A "host name slot" isalso daunting. Because of this, we have designeddefined in this document to be a protocolthat requires no updatingelement or a function argument or a return value (and so on) explicitly designated for carrying a host name. Examples ofanyhost nameservers. IDNA still requiresslots include: theupdatingQNAME field ofapplications, but only for inputa DNS query; the name argument of the gethostbyname() library function; the part of an email address following the at-sign (@) in the From: field of an email message header; anddisplaythe host portion ofnames,the URI in the src attribute of an HTML <IMG> tag. General text that just happens to contain a host name is not a host name slot; forchanges toexample, a host name appearing in theprotocols. Onceplain text body of an email message is not occupying auser has updated these, she or he could immediately start usinghost name slot. An "internationalized host name slot" is defined in this document to be a host name slot explicitly designated for carrying an internationalized hostnames.name as described in this document. Thecost of implementing IDNdesignation maythusbemuch lower, andstatic (for example, in thespeedspecification ofimplementation could be much higher. 1.2 Terminology The key words "MUST", "SHALL", "REQUIRED", "SHOULD", "RECOMMENDED", and "MAY"the protocol or interface) or dynamic (for example, as a result of negotiation in an interactive session). A "generic host name slot" is defined in this documentareto beinterpreted as described in RFC 2119 [RFC2119].any host name slot that is not an internationalized host name slot. Obviously, this includes any host name slot whose specification predates IDNA. 3. Requirements IDNA conformance means adherence of the following three rules: 1) Whenever a host name is put into a generic host name slot, every label MUST contain only ASCII characters. Given any host name, an equivalent host name satisfying this requirement can be obtained by applying the ToASCII operation (see section 4) to each label. 2) ACE labels SHOULD be hidden from users whenever possible. Therefore, before a host name is displayed to a user or is output into a context likely to be viewed by users, the ToUnicode operation (see section 4) SHOULD be applied to each label. When requirements 1 and 2 both apply, requirement 1 takes precedence. 3) Whenever two host labels are compared, they MUST be considered to match if and only if their ASCII forms (obtained by applying ToASCII) match using a case-insensitive ASCII comparison. 4. Conversion operations This section specifies the ToASCII and ToUnicode operations. Each one operates on a sequence of Unicode code points (but remember that all ASCII code points are also Unicode code points). When host names are represented using character sets other than Unicode and ASCII, they will need to first be transcoded to Unicode before these operations can be applied, and might need to be transcoded back afterwards. 4.1 ToASCII The ToASCII operation takes a sequence of Unicode code points and transforms it into a sequence of code points in the ASCII range (0..7F). The original sequence and the resulting sequence are equivalent host labels. ToASCII fails if any step of it fails. Failure means that the original sequence cannot be used as a host label. ToASCII never alters a sequence of code points that are all in the ASCII range to begin with (although it may fail). ToASCII consists of the following steps: 1. If all code points in the sequence are in the ASCII range (0..7F) then skip to step 3. 2. Perform the steps specified in [NAMEPREP]. 3. Host-specific restrictions: Host names have additional restrictions: * Verify the absence of non-LDH ASCII code points; that is, the absence of 0..2C, 2E..2F, 3A..40, 5B..60, and 7B..7F. * Verify the absence of leading and trailing hyphen-minus; that is, the absence of U+002D at the beginning and end of the sequence. 4. If all code points in the sequence are in the ASCII range (0..7F), then skip to step 8. 5. Verify that the sequence does NOT begin with the ACE prefix. 6. Encode the sequence using the encoding algorithm in [AMC-ACE-Z]. 7. Prepend the ACE prefix. 8. Verify that the number of code points is in the range 1 to 63 inclusive. 4.2 ToUnicode The ToUnicode operation takes a sequence of Unicode code points and returns a sequence of Unicode code points. If the input sequence is a host label in ACE form, then the result is an equivalent host label that is not in ACE form, otherwise the original sequence is returned unaltered. ToUnicode never fails. If any step fails, then the original input sequence is returned immediately in that step. 1. If all code points in the sequence are in the ASCII range (0..7F) then skip to step 3. 2.Structural OverviewPerform the steps specified in [NAMEPREP]. (If step 3 of ToASCII is also performed here, it will not affect the overall behavior of ToUnicode, but it is not necessary.) 3. Verify that the sequence begins with the ACE prefix, and save a copy of the sequence. 4. Remove the ACE prefix. 5. Decode the sequence using decoding algorithm in [AMC-ACE-Z]. Save a copy of the result of this step. 6. Apply ToASCII. 7. Verify that the sequence matches the saved copy from step 3, using a case-insensitive ASCII comparison. 8. Return the saved copy from step 5. 5. ACE prefix The ACE prefix, used in the conversion operations (section 4), will be specified in a future revision of this document. It will be two alphanumeric ASCII characters followed by two hyphen-minuses. It MUST be recognized in a case-insensitive manner. For example, the eventual ACE prefix might be the string "jk--". In this case, an ACE label might be "jk--r3c2a-qc902xs", where "r3c2a-qc902xs" is the part of the ACE label that is generated by the encoding steps in [AMC-ACE-Z]. 6. Implications for typical applications using DNS In IDNA,users'applicationsare updated toperform the processing needed to input internationalized host names from users, display internationalized host namesthat are returned from the DNSto users, and process the inputs and outputs fromthe DNS. 2.1 Interfaces betweenDNScomponents in IDNAand other protocols that carry host names. The components and interfacesin IDNAbetween them can be represented pictorially as: +------+ | User | +------+ ^|Input| Input and display: local interface methods|(pen,| (pen, keyboard, glowing phosphorus, ...)+-----------------|------------------------------++-------------------|-------------------------------+ | v | |+--------------------------++-----------------------------+ | | | Application | | |+--------------------------+| (conversion between local | | | | character set and Unicode | | | | is done here) | | | +-----------------------------+ | | ^ ^ | End system | | | | | Call toresolver:| |Application-specificresolver: | | Application-specific | | ACE | |nameprepped ACE| |protocol:protocol: | | v|predefined| predefined by the |End system| +----------+|protocol| protocol or defaults | | | Resolver ||to nameprepped| to ACE | | +----------+ | | | ^ | |+---------------|----------|---------------------++-----------------|----------|----------------------+ DNSprotocol:|protocol: | | ACE |nameprepped ACE|| v v +-------------+ +---------------------+ | DNS servers | | Application servers | +-------------+ +---------------------+This document uses the generic term "ACE" for an ASCII-compatible encoding. After the IDN Working Group has chosen a specific ACE, this document will be updated to refer to just that single ACE. Until that time, an implementor creating experimental software must choose an ACE to use, such as RACE or LACE or DUDE. 2.1.16.1 Entry and display in applications Applications can accept host names using any character set or sets desired by the application developer, and can display host names in any charset. That is,thisthe IDNA protocol does not affect the interface between users and applications. An IDNA-aware application can accept and display internationalized host names in two formats: the internationalized character set(s) supported by the application, andinas anACE.ACE label. Applications MAY allowACEinput andoutput,display of ACE labels, but are not encouraged to do so except as an interface for special purposes, possibly for debugging. ACE encoding is opaque and ugly, and should thus only be exposed to users who absolutely need it. The optional use, especially during a transition period, of ACE encodings in the user interface is described in section3.6.4. Because namepartslabels encodedwithas ACE name labels can be rendered either as the encoded ASCII characters or the proper decoded characters, the application MAY have an option for the user to select the preferred method of display; if it does, rendering the ACE SHOULD NOT be the default. Host names are often stored and transported in many places. For example, they are part of documents such as mail messages and web pages. They are transported in the many parts of many protocols, such as both the control commands and the RFC 2822 body parts of SMTP, and the headers and the body content in HTTP. It is important to remember that host names appear both in host name slots and in the content that is passed over protocols. In protocols and document formats that define how to handle specification or negotiation of charsets, IDN host namepartslabels can be encoded in any charset allowed by the protocol or document format. If a protocol or document format only allows one charset, IDN host nameparts mustlabels MUST be given in that charset. In any place where a protocol or document format allowstransmitiontransmission of the characters in IDN host nameparts,labels, IDN host namepartslabels SHOULD be transmitted using whatever character encoding and escape mechanism that the protocol or document format uses at that place. All protocols that have generic hostnames as protocol elementsname slots already have the capacity for handling host names in the ASCII charset. Thus, IDN host namepartslabels that have been processed with the ToASCII operation can inherently bespecified inhandled by thoseprotocols in the ACE charset, which is a superset of the ASCII charset that uses the same set of octets. 2.1.2protocols. 6.2 Applications and resolvers Applications communicate with resolver libraries through a programming interface (API). Typically, the IETF does not standardize APIs, although there are non-standard APIs specified for IPv6. This protocol does not specify a specific API, but instead specifiesonlythe operations that must be used for input to and outputformats of the host names tofrom the resolver library.Before converting the name parts into ACE, the application MUST prepare each name part as specified in [NAMEPREP]. TheAn application MUSTuse ACE for theprepapre name parts that are senttoin theresolver, andDNS protocol using the ToASCII operation. Internationalized labels received from the resolver will alwaysget name parts encodedbe in ACEfrom the resolver.form. IDNA-aware applications MUST be able to work with both non-internationalized host namepartslabels (those that conform to [STD13] and [STD3]) and internationalized host nameparts. An IDNA-aware application that is resolving a non-internationalized host name part MUST NOT do any preparation or conversion to ACE on any non-internationalized name part. 2.1.3labels. 6.3 Resolvers and DNS servers An operating system might have a set of libraries forconverting host names to nameprepped ACE.performing the ToASCII operation. The input to such a library might be in one or more charsets that are used in applications (UTF-8 and UTF-16 are likely candidates for almost any operating system, and script-specific charsets are likely for localizedoperating systems). The output would be either the unchanged name part (if the input already conforms to [STD13] and [STD3]), or the nameprepped, ACE-encoded name part.operating systems). DNS servers MUST use the ACE format for internationalized hostname parts.labels. All internationalized names stored in DNS servers must be valid names that have been processed with the ToASCII operation. If a signalling system which makes negotiation possible between old and new DNS clients and servers is standardized in the future, the encoding of the query in the DNS protocol itself can be changed from ACE to something else, such as UTF-8. The question whether or not this should be used is, however, a separate problem and is not discussed in this memo.2.1.46.4 Avoiding exposing users to the raw ACE encoding All applications that might show the user a host name that was received from a gethostbyaddr or other such lookup SHOULD update as soon as possible in order to prevent users from seeing the ACE. However, this is not considered a big problem because so few applications show this type of resolution to users. If an application decodes an ACE name using ToUnicode but cannot show all of the characters in the decoded name, such as if the name contains characters that the output system cannot display, the application SHOULD show the name in ACE format instead of displaying the name withthe replacement character (U+FFFD). This is to makethe replacement character (U+FFFD). This is to make it easier for the user to transfer the name correctly to other programs. Programs that by default show the ACE form when they cannot show all the characters in a name label SHOULD also have a mechanism to show the name that is produced by the ToUnicode operation with as many characters as possible and replacement characters in the positions where characters cannot be displayed. In many cases, the application doesn't know exactly what the underlying rendering engine can or cannot display. In addition to the condition above, if an application receives an ACE host name after performing the ToUnicode operation, meaning that the name was not properly prepared with ToASCII (for example, if it has illegal characters in it), the application MUST show the name in ACE format because the ToUnicode operation never fails, but returns the original input if errors are detected at any step. 6.5 Bidirectional text in host names The display of host names that contain bidirectional text is not covered in this document. It may be covered in a future version of this document, or may be covered in a different document. For developers interested in displaying host names that have bidirectional text, the Unicode standard has an extensive discussion of how to deal with reorder glyphs for display when dealing with bidirectional text such as Arabic or Hebrew. See [UAX9] for more information. In particular, all Unicode text is stored in logical order. 7. Name Server Considerations Internationalized host name data in zone files (as specified by section 5 of RFC 1035) MUST be processed with ToASCII before iteasier for the user to transferis entered in thename correctly to other programs. Programszone files. It is imperative thatby default show the ACE form when they cannot show all the characters inthere be only one ASCII encoding for a particular host name. ACE is an encoding for host namepart SHOULD also havelabels that use non-ASCII characters. Thus, amechanism to show theprimary master namewith as many characters as possible and replacement characters in the positions where characters cannot be displayed. In many cases, the application doesn't know exactly what the underlying rendering engine can or cannot display. In addition to the condition above, ifserver MUST NOT contain anapplicationACE-encoded label that decodes to anACE name but findsASCII label. The ToASCII operation assures that no such names are ever output from thedecodedoperation. Name servers MUST NOT have any records with host names that contain internationalized namewas not properlylabels unless those name labels have be preparedaccordingwith the ToASCII operation. If names that are not processed by ToASCII are passed to[NAMEPREP] (for example, ifan application, ithas illegal characterswill result init),unpredictable behavior. Note that [NAMEPREP] describes how to handle versioning of unallocated codepoints. 8. Root Server Considerations Because there are no changes to theapplication SHOULD showDNS protocols, adopting this protocol has no effect on thename in ACE format and SHOULD NOT displayDNS root servers. 9. Security Considerations Much of thename in its decoded form. This is to avoidsecurityissues described in [NAMEPREP]. 2.1.5 Automatic detectionofACE An application which receives a host name SHOULD verify whether or notthehost name is in ACE. This is possible by verifyingInternet relies on the DNS. Thus, any change to theprefix in eachcharacteristics of thelabels, and seeing whether or notDNS can change thelabel is in ACE. This MUST be done regardlesssecurity of much ofwhether or notthecommunication channel used (such as keyboard input, cut and paste, application protocol, application payload, and so on) is encoding with ACE. The reason for this requirement isInternet. This memo describes an algorithm which encodes characters thatmany applicationsare notACE-aware. Applicationsvalid according to STD3 and STD13 into octet values that arenot ACE-aware will send host names in ACE but mark the charsetvalid. No security issues such asbeing US-ASCIIstring length increases orsome other charset which hasnew allowed values are introduced by thecharacters thatencoding process or the use of these encoded values, apart from those introduced by the ACE encoding itself. Host names arevalidused by users to connect to Internet servers. The security of the Internet would be compromised if a user entering a single internationalized name could be connected to different servers based on different interpretations of the internationalized host name. Because this document normatively refers to [NAMEPREP], it includes the security considerations from that document as well. A. References [AMC-ACE-Z] Adam Costello, "AMC-ACE-Z version 0.3.1", draft-ietf-idn-amc-ace-z. [NAMEPREP] Paul Hoffman and Marc Blanchet, "Preparation of Internationalized Host Names", draft-ietf-idn-nameprep. [RFC2119] Scott Bradner, "Key words for use in RFCs to Indicate Requirement Levels", March 1997, RFC 2119. [STD3] Bob Braden, "Requirements for Internet Hosts -- Communication Layers" (RFC 1122) and "Requirements for Internet Hosts -- Application and Support" (RFC 1123), STD 3, October 1989. [STD13]as a subset. 2.1.6 Bidirectional text In IDNA, text storagePaul Mockapetris, "Domain names - concepts anddisplay follows the rules in thefacilities" (RFC 1034) and "Domain names - implementation and specification" (RFC 1035, STD 13, November 1987. [UAX9] Unicodestandard [Unicode3.1]. In particular, allStandard Annex #9, The Bidirectional Algorithm. http://www.unicode.org/unicode/reports/tr9/ [UNICODE] The Unicodetext is stored in logical order; theStandard, Version 3.1.0: The Unicodestandard has an extensive discussion of how to deal with reorder glyphs for display when dealing with bidirectional text suchConsortium. The Unicode Standard, Version 3.0. Reading, MA, Addison-Wesley Developers Press, 2000. ISBN 0-201-61633-5, asArabic or Hebrew. See [UAX9]amended by: Unicode Standard Annex #27: Unicode 3.1 <http://www.unicode.org/unicode/reports/tr27/tr27-4.html>. B. Design philosophy Many proposals formore information. 3. Name Server Considerations It is imperativeIDN protocols have required thatthereDNS servers beonly one encoding for a particular host name. ACE is an encoding for host name parts that use characters outside those allowed forupdated to handle internationalized hostnames [STD13]. Thus,names. Because of this, aprimary master name server MUST NOT containperson who wanted to use anACE-encodedinternationalized host name would have to be sure thatdecodestheir request went to ahost nameDNS server thatis allowed in [STD13] and [STD3]. Name servers MUST NOT have any records with host nameshad been updated for IDN. Further, thatcontain internationalized name parts unless those name parts have be prepared accordingserver could send queries only to[NAMEPREP]. If namesother servers thatare not legal in [NAMEPREP] are passed to an application, it will result in an error being passed to the application with no error being reported to the name server. Further, no application will ever askhad been updated fora name that is not legal in [NAMEPREP]IDN, becauserequests always go through [NAMEPREP] before getting totheDNS. Note that [NAMEPREP] describes howqueries contain new protocol elements tohandle versioning of unallocated codepoints. The hostdifferentiate IDN namedata in zone files (as specified by section 5 of RFC 1035) MUSTlabels from current host labels. In addition, these proposals require that resolvers beboth nameprepped and ACE encoded. 4. Root Server Considerations Because there are no changesupdated to use theDNSnew protocols,adopting this protocol has no effect on the DNS root servers. 5. Security Considerations Much of the security of the Internet relies onand in most cases theDNS. Thus, any changeapplications would need to be updated as well. These proposals would require changes to thecharacteristicsapplication protocols that use host names as protocol elements, because of theDNS can change the security of much ofassumptions and requirements made in those protocols about theInternet. This memo describes an algorithm which encodescharacters thatare not valid according to STD3have always been used for host names, andSTD13 into octet values that are valid. No security issues such as string length increases or new allowed values are introduced bythe encodingprocess or the useofthese encoded values, apart fromthoseintroduced by the ACE encoding itself. When detecting an ACE-encoded host name, and decoding the ACE, care must be taken that the resulting value(s) are valid characters which can be handled by the application. This is described in more detail in section 2.1.4. Host names are used by userscharacters. Other proposals for IDN protocols do not require changes toconnectDNS servers but still require changes toInternet servers. The securitymost application protocols to handle the new names. Updating all (or even a significant percentage) of theInternet would be compromised if a user entering a single internationalized name couldexisting servers in the world will beconnecteddifficult, todifferent servers based on different interpretations ofsay theinternationalized host name. Because this document normatively refersleast. Updating applications, application gateways, and clients to handle changes to[NAMEPREP], it includesthesecurity considerations fromapplication protocols is also daunting. Because of this, we have designed a protocol thatdocument as well. 6. References [NAMEPREP] Paul Hoffman & Marc Blanchet, "Preparationrequires no updating ofInternationalized Host Names", draft-ietf-idn-nameprep. [RFC2119] Scott Bradner, "Key words for use in RFCs to Indicate Requirement Levels", March 1997, RFC 2119. [STD3] Bob Braden, "Requirementsany name servers. IDNA still requires the updating of applications, but only forInternet Hosts -- Communication Layers" (RFC 1122)input and"Requirementsdisplay of names, not forInternet Hosts -- Application and Support" (RFC 1123), STD 3, October 1989. [STD13] Paul Mockapetris, "Domain names - concepts and facilities" (RFC 1034) and "Domain names - implementation and specification" (RFC 1035, STD 13, November 1987. [UAX9] Unicode Standard Annex #9, The Bidirectional Algorithm. http://www.unicode.org/unicode/reports/tr9/ [Unicode3.1] The Unicode Standard, Version 3.1.0: The Unicode Consortium. The Unicode Standard, Version 3.0. Reading, MA, Addison-Wesley Developers Press, 2000. ISBN 0-201-61633-5, as amended by: Unicode Standard Annex #27: Unicode 3.1 <http://www.unicode.org/unicode/reports/tr27/tr27-4.html>. B. Changes from the -02 draft Editorial changes throughout 2.1.1: Majorchanges to thesecond paragraph. Added major text to fourth paragraph. 2.1.4: Added toprotocols. Once users have updated theendapplications, they can immediately start using internationalized host names. The cost ofthe second paragraph. Added the third paragraph. 2.1.6: Complete change. 6: Added [Unicode3.1]implementing IDN may thus be much lower, and[UAX9].the speed of implementation could be much higher. C. Authors' Addresses Patrik Faltstrom Cisco Systems Arstaangsvagen 31 J S-117 43 Stockholm Sweden paf@cisco.com Paul Hoffman Internet Mail Consortium and VPN Consortium 127 Segre Place Santa Cruz, CA 95060 USA phoffman@imc.org Adam M. Costello University of California, Berkeley idna-spec.amc @ nicemice.net ----