view Side-By-Side changes
INTERNET-DRAFT Rich Petke<draft-ietf-urlreg-procedures-00.txt><draft-ietf-urlreg-procedures-01.txt> CompuServe Network ServicesMarch 13,April 30, 1998 Registration Procedures for URL Scheme Names Status of this Memo This document is an Internet-Draft. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." Tolearnview thecurrent statusentire list ofany Internet-Draft,current Internet-Drafts, please check the "1id-abstracts.txt" listing contained in the Internet-Drafts Shadow Directories onds.internic.netftp.is.co.za (Africa), ftp.nordu.net (Northern Europe), ftp.nis.garr.it (Southern Europe), munnari.oz.au (Pacific Rim), ftp.ietf.org (US East Coast),nic.nordu.net (Europe),or ftp.isi.edu (US WestCoast), or munnari.oz.au (Pacific Rim).Coast). Distribution of this memo is unlimited. This Internet Draft expiresSeptember 13,October 31, 1998. Abstract This document defines the process by which new URL schemes are registered. 1.0 Introduction A Uniform Resource Locator (URL) is a compact string representation of the location for a resource that is available via the Internet. RFC [URI-SYNTAX] defines the general syntax and semantics of URIs, and, by inclusion, URLs. URLs are designated by including a "scheme" and then a "scheme-specific part". Many URL schemes are alreadydefined. RFC [URL-GUIDELINES] provides guidelines fordefined, however, new schemes may need to be defined in thedefinition offuture in order to accommodate newURL schemes, for consideration by those who are defining and registering or evaluating those definitions. 2.0 Scope The URL schemeInternet protocols and/or procedures. A registration process isrestrictedneeded to ensure that theregistration of new URL scheme names. 3.0 Classificationsnames ofScheme Names NotallURL scheme namessuch new schemes arecreated equal. This section definesguaranteed not to collide. Further, thevarious classifications forregistration process ensures that URLscheme names. Section 4 of thisschemes intended for wide spread, public use are developed in an orderly, well-specified, and public manner. This document definestheregistration proceduresto be followed to registerwhich use the Internet Assigned Numbers Authority (IANA) as a central registry for such URL schemename. 3.1 Class 1 - Common Names Ifnames and thename proposedIETF RFC mechanism for scheme review, where appropriate. 2.0 URL Scheme Name Registration Registration of a new URL scheme name starts with the construction of a registration proposal. Registration may occur in several different registration trees, which have different requirements as discussed below. In general, the new registration proposal is circulated and reviewed in acommon word, meaningfulfashion appropriate toa large and/or wide population, thenthe tree involved. The URL scheme name isconsidered a Class 1 name. Examples of such names include: Telephone Phone Fax TV Weather Music 3.2 Class 2 - Acronyms Short acronyms for technical terms which do not themselves create common words (i.e.then registered if theacronymproposal isnot a Class 1 name), are considered to be Class 2 scheme names. Examples of such names include: HTTP FTP NNTP TELNET WAIS 3.3 Class 3 - Vanity Namesacceptable. The following sections describe the requirements andRegistered Trade Names Scheme names that echo registered trade namesprocedures used for each of the different registration trees. 2.1. Registration Trees andvanity names are consideredURL Schemes In order tobe Class 3 scheme names. Examplesincrease the efficiency and flexibility ofsuch names include: AOL RealAudio STTNG 3.4 Class 4 - Private Schemes Scheme names based on IANA assigned domainthe registration process, three different formats of URL scheme namesand matchingmay be registered. The registration requirements for each format differ allowing thesyntax specified below are consideredregistration procedure to accommodate the different natural requirements for URL schemes. For example, a scheme that will beClass 4recommended for wide support and implementation by the Internet Community requires a more complete review than a schemenames.that is used with resources associated with proprietary software. Thesyntax of a class 4following subsections define registration "trees" and the associated URL scheme nameis: "NOREG+" <domain> [ "+" <extension>] ":" where - <domain> is defined in [STD13], section 3.5. <extension> is optional and may contain any legalformats available at this time. Note that some URL schemes defined prior to this document do not conform to the naming conventions described below. See Appendix A for a discussion of those schemes. 2.1.1. IETF Tree The IETF tree is intended for URL schemes of general interest to the Internet Community. Registration in the IETF tree requires approval by the IESG and publication of the URL scheme syntax and semantics as some form of RFC, usually a standards track RFC. URL scheme names in the IETF tree are normally denoted by names that are not explicitly faceted, i.e., do not contain period (".") characters. The "owner" of a URL scheme name registration in the IETF tree is assumed to be the IETF itself. Modification or alteration of the specification requires the same level of processing (e.g. standards track) as required for the initial registration. 2.1.2. Vendor Tree The vendor tree is used for URL schemes associated with commercially available products. "Vendor" or "producer" are construed as equivalent and very broadly in this context. A registration may be placed in the vendor tree by anyone who needs to identify a scheme for (1) specifying the location of a resource available via the Internet (2) which may be accessed using a protocol for which there is not currently a URL scheme registered. The registration formally belongs to the vendor or organization registering the scheme name. Changes to the specification will be made at their request, as discussed in subsequent sections. Registrations in the vendor tree will be distinguished by the leading facet "vnd.". That must be followed by an IANA-approved designation of the producer's name, which is then followed by a URL scheme name or product designation (e.g., vnd.bigcompany.funnypictures). While public exposure and review of URL scheme names to be registered in the vendor tree is not required, using the ietf-types list for review is strongly encouraged to improve the quality of those specifications. Registrations in the vendor tree may be submitted directly to the IANA. 2.1.3. Personal or Vanity Tree Registrations for URL schemes created experimentally or as part of products that are not distributed commercially may be registered in the personal or vanity tree. The registrations are distinguished by the leading facet "prs.". The owner of "personal" registrations and associated specifications is the person or entity making the registration, or one to whom responsibility has been transferred as described below. While public exposure and review of URL scheme names to be registered in the personal tree is not required, using the ietf-types list for review is strongly encouraged to improve the quality of those specifications. Registrations in the personal tree may be submitted directly to the IANA. 2.1.4. Additional Registration Trees From time to time and as required by the community, the IANA may, with the advice and consent of the IESG, create new top-level registration trees. It is explicitly assumed that these trees may be created for external registration and management by well-known permanent bodies, such as scientific societies, for URL schemes specific to the sciences they cover. In general, the quality of review of specifications for one of these additional registration trees is expected to be equivalent to that which IETF would give to registrations in its own tree. Establishment of these new trees will be announced through RFC publication approved by the IESG. 2.2. Registration Requirements URL scheme namecharactersregistration proposals are all expected to conform to various requirements laid out in the following sections. Note that requirement specifics sometimes vary depending on the registration tree, again asdefineddetailed in the following sections. 2.2.1. Scheme Names All new URL scheme names, regardless of registration tree, MUST conform to the syntax specified for scheme names in RFC [URI-SYNTAX]. 2.2.2. URL Syntax All new URL schemes registered in the IETF tree, MUST conform to the generic syntax for URLs as specified in RFC [URI-SYNTAX].ExamplesURL schemes registered in the vendor and personal trees are encouraged to conform to the generic syntax but are not required to do so in order to be registered. All new URL schemes should follow the Guidelines for URL Schemes, set forth in RFC [URL-GUIDELINES]. 2.2.3. Security Requirements An analysis ofvalid Class 4the security issues inherent in the new URL schemenames include: noreg+compuserve.net+rpa: noreg+nt.microsoft.com: 4.0 Registration Procedures (tois required for all registrations in the IETF tree. (This is in accordance with the basic requirements for all IETF protocols.) A similar analysis for schemes registered in the vendor or personal trees is encouraged but not required. However, regardless of what security analysis has or has not been done, all descriptions of security issues must befollowed byas accurate as possible regardless of registration tree. In particular, arequestor) To registerstatement that there are "no security issues associated with this scheme" must not be confused with "the security issues associates with this scheme have not been assessed". There is absolutely no requirement that URL schemes registered in any tree be secure or completely free from risks. Nevertheless, all known security risks must be identified in the registration of anewURL schemename: 1. Determine whichname, again regardless of registration tree. The security considerations section of all registrations is subject to continuing evaluation and modification, and in particular may be extended by use of the "comments on URL schemename class (asname" mechanism described insection 3) best describessubsequent sections. 2.2.4. Publication Requirements Proposals for URL schemes registered in the IETF tree must be published as RFCs. RFC publication of vendor and personal URL schemes is encouraged but not required. In all cases IANA will retain copies of all URL scheme proposals and "publish" them as part of theproposedURL schemename. Ifnames registration tree itself. Other than in theproposedIETF tree, the registration of a URL scheme name does notappear to clearly belong to any one classification, requestimply endorsement, approval, or recommendation by IANA or IETF or even certification that theIESG to classifyspecification is adequate. To become Internet Standards, protocol, data objects, or whatever must go through the IETF standards process. This is too difficult and too lengthy a process for the convenient registration of URL schemename. 2. Completenames. The IETF tree exists for URL schemes that do require a substantive review and approval process with the vendor and personal trees exist for those that do not. It is expected that applicability statements for particular applications will be published from time to time that recommend implementation of, and support for, URL schemes that have proven particularly useful in those contexts. As discussed above, registration of a top-level type requires standards-track processing and, hence, RFC publication. 2.3. Registration Procedure The following procedure has been implemented by the IANA for review and approval of new URL schemenamenames. This is not a formal standards process, but rather an administrative procedure intended to allow community comment and sanity checking without excessive time delay. For registrationform foundinappendix Athe IETF tree, the normal IETF processes should be followed, treating posting ofthis document. 3.an internet-draft and announcement on the ietf-types list (as described in the next subsection) as a first step. ForClass 4registrations in the vendor or personal tree, the initial review step described below may be omitted and the URL schemenames ONLY, forwardname may be registered directly by submitting thecompleted formtemplate and an explanation directly to IANAdirectly. 4. For all other(at iana@iana.org). However, authors of vendor or personal URL schemename classes, forwardspecifications are encouraged to seek community review and comment whenever that is feasible. 2.3.1. Present thecompleted formURL Scheme Name to theIESG. WithCommunity for Review Send a proposed URL scheme name registration to the "ietf-types@iana.org" mailing list for a two week review period. This mailing list has been established for theexceptionpurpose ofClass 4reviewing proposed URL schemes. URL schemenames, whichnames proposed to this mailing list areeasily recognizable,not formally registered and should not be used until theIESG hasregistration procedure is complete. The intent of therightpublic posting is toreclassifysolicit comments and feedback on the choice of scheme name, the syntax and semantics of the scheme, and a review of anyproposedinteroperability or security considerations. The submitter may submit a revised registration, or withdraw the registration completely, at any time. 2.3.2. IESG Approval URL scheme namesthat have been incorrectly classified. Theregistered in the IETF tree must be submitted to the IESGshould process applicationsfor approval. 2.3.3. IANA Registration Provided that theregistration of newURL scheme name meets the requirements for URL scheme namesin a timely manner. It may delay theand has obtained approvalof any application for just cause, such as lack of consensus withinthat is necessary, the author may submit theIETF (when a Class 1 scheme nameregistrationis requested), or multiple parties attemptingrequest to the IANA, which will register thesame or similarschemenames. 5.0 Registration Procedures (to be followed byname and make theIESG) 5.1 Class 1 Procedures (Common Names) Registering a Class 1URL scheme namerequiresregistration available to theconsensuscommunity. 2.4. Comments on URL Scheme Name Registrations Comments on registered URL scheme names may be submitted by members of theIETF. The IESGcommunity to IANA. These comments willseek inputbe passed on to the "owner" of theprospective newURL scheme nameand will either approve or reject the registration on behalfif possible. Submitters ofthe IETF. The IESGcomments mayrequire the proposed scheme torequest that their comment bedocumented in an RFC (standards track, informational, or BCP). Ifattached to theIESGURL scheme name registration itself, and if IANA approves of this theregistration, itcomment willforwardbe made accessible in conjunction with the scheme name registrationform to IANA for recording. 5.2 Class 2 Procedures (Acronyms) Registering a Class 2itself. 2.5. Location of Registered URL Scheme Name List URL scheme namerequires only the consensus of the IESG. The IESG must requireregistrations will be posted in theproposedanonymous FTP directory "ftp://ftp.isi.edu/in-notes/iana/assignments/URL-scheme-names/" and all registered URL schemetonames will bedocumentedlisted inanthe periodically issued "Assigned Numbers" RFCor other permanent[currently STD 2, RFC 1700]. The scheme syntax andreadily available reference, in sufficient detail so that interoperability between independent implementations is possible. If the IESG approves the registrationsemantics description and other supportingdocumentation,material may also be published as an Informational RFC by sending itwill forwardto "rfc-editor@isi.edu" (please follow theregistration forminstructions to RFC authors [RFC-1543]). 2.6. IANAfor recording. 5.3 Class 3Procedures(Vanity Names and Registered Trade Names) Class 3for Registering URL scheme namesare approved on a first come, first served basis.TheIESGIANA willverify that the requestedonly register URL schemename is indeednames in the IETF tree in response to aclass 3 name,communication from the IESG stating that a given registration has been approved. Vendor and personal types will be registered by theparty requestingIANA automatically and without any formal review as long as the following minimal conditions are met: o Security considerations o TBD 2.7. Change Control Once a URL scheme nameindeedhasreasonable rightsbeen published by IANA, the author may request a change toregisterits definition. The descriptions of thescheme name, and that sufficiently stable "pointdifferent registration trees above designate the "owners" ofcontact" information has been supplied ineach type of registration. The change request follows the same procedure as the registrationform. After verification,request: (1) Publish theIESG will forwardrevised template on theapplication to IANAietf-types list. (2) Leave at least two weeks forrecording. The IESG may require the scheme tocomments. (3) Publish using IANA after formal review if required. Changes should bedocumentedrequested only when there are serious omission or errors inan RFC. 6.0 Registration Procedures (tothe published specification. When review is required, a change request may befollowed by IANA) 6.1 Procedures for Class 1, 2, and 3 URL Scheme Names IANA will only accept completeddenied if it renders entities that were valid under the previous definition invalid under the new definition. The owner of a URL schemenameregistrationforms which have been approvedmay pass responsibility for the registration to another person or agency by informing IANA and the ietf-types list; this can be done without discussion or review. The IESG may reassign responsibility forrecording. 6.2 Class 4 Procedures (Private Schemes) Upon receipt ofacompletedURL schemenamename. The most common case of this will be to enable changes to be made to schemes where the author of the registrationform, IANA shall: 1. Verifyhas died, moved out of contact or is otherwise unable to make changes that are important to theproposedcommunity. URL scheme nameconforms to the syntax specifiedregistrations may not be deleted; URL scheme names which are no longer believed appropriate forClass 4use can be declared OBSOLETE by a change to their "intended use" field; such URL scheme names will be clearly marked insection 3.4 of this document. 2. Verify that the requestor is affiliated with the owner of the DNS name specified in the registration form. 3. Verify thatthe"pointlists published by IANA. 2.8. Registration Template To: ietf-types@iana.org Subject: Registration ofcontact"URL Scheme Name XXX URL Scheme Name: Security considerations: Interoperability considerations: Published specification: Applications which use this URL scheme name: Additional information: Person & email address to contact for further information: Intended usage: (One of COMMON, LIMITED USE or OBSOLETE) Author/Change controller: (Any other informationis sufficiently stable. 4. Recordthat theregistration. 7.0author deems interesting may be added below this line.) 3.0 Security Considerations Information that creates or updates a registration needs to be authenticated. Information concerning possible security vulnerabilities of a protocol may change over time. Consequently, claims as to the security properties of a registered URL scheme may change as well. As new vulnerabilities are discovered, information about such vulnerabilities may need to be attached to existing registrations, so that users are not misled as to the true security properties of a registered URLschemes.scheme. Delegations of a name space should only be assigned to someone with adequate security.8.04.0 References[STD 13] [RFC-URI-SYNTAX] [RFC-URL-GUIDELINES] 9.0RFC [URI-SYNTAX] RFC [URL-GUIDELINES] 5.0 Author's Address Rich PetkeCompuServe Network Services Inc. (WorldCom)CNS/WorldCom 5000 Britton Road P. O. Box 5000 Hilliard, OH43026-5000430 USA Phone:614-723-4157 Email:+1 614 723 4157 Fax: +1 614 723 1333 EMail: rpetke@compuserve.net Appendix A -- Grandfathered URL SchemeName Registration Form URL Scheme Name to be Registered (case insensitive): URL Scheme Name Class (1, 2, 3, 4, or unknown): Person Requesting Registration (name, title, affiliation, postal address, telephone numbers, email address): PointNames A number ofContact for this Registration (name, title, affiliation, postal address, telephone numbers, email address): Published specification(s) for this Scheme Name (I-Ds, RFCs, etc.): Other Relevant Information Regarding this Application: For Class 4URL schemenames ONLY, sendnames, in use prior to 1998, would, if registered under the guidelines in thisform to: ietf-types@iana.org For all other URL scheme name classes, including URL scheme namesdocument, be placed into either the vendor or personal trees. Re-registration ofan unknown class, sendthose types to reflect the appropriate trees is encouraged, but not required. Ownership and change control principles outlined in thisform to: iesg@ietf.org.document apply to those types as if they had been registered in the trees described above. ----