view Side-By-Side changes
Date: Tue, 09 Apr 2002 08:57:28 GMT Server: Apache/1.3.20 (Unix) Last-Modified: Fri, 14 Aug 1998 13:04:00 GMT ETag: "323d8c-5f98-35d435c0" Accept-Ranges: bytes Content-Length: 24472 Connection: close Content-Type: text/plain INTERNET-DRAFT R. Petke<draft-ietf-urlreg-procedures-03.txt> WorldCom<draft-ietf-urlreg-procedures-04.txt> MCIWORLDCOM Advanced NetworksAugust 7,November 1, 1998 Registration Procedures for URL Scheme Names Status of this Memo This document is an Internet-Draft. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." Toviewlearn theentire list ofcurrentInternet-Drafts,status of any Internet-Draft, please check the "1id-abstracts.txt" listing contained in the Internet-Drafts Shadow Directories onftp.is.co.za (Africa), ftp.nordu.net (Northern Europe), ftp.nis.garr.it (Southern Europe), munnari.oz.au (Pacific Rim),ftp.ietf.org (US East Coast),ornic.nordu.net (Europe), ftp.isi.edu (US WestCoast).Coast), or munnari.oz.au (Pacific Rim). Distribution of this memo is unlimited. ThisInternet DraftInternet-Draft expiresFebruary 7,April 30, 1999. Copyright Notice Copyright (C) The Internet Society (1998). All Rights Reserved. Abstract This document defines the process by which new URLschemesscheme names are registered. 1.0 Introduction A Uniform Resource Locator (URL) is a compact string representation of the location for a resource that is available via the Internet. RFC[URI-SYNTAX]2396 [1] defines the general syntax and semantics of URIs, and, by inclusion, URLs. URLs are designated by including a "<scheme>:" and then a "<scheme-specific-part>". Many URL schemes are already defined, however, new schemes may need to be defined in the future in order to accommodate new Internet protocols and/or procedures. A registration process is needed to ensure that the names of all such new schemes are guaranteed not to collide. Further, the registration process ensures that URL schemes intended for wide spread, public use are developed in an orderly, well-specified, and public manner. This document defines the registration procedureswhich use the Internet Assigned Numbers Authority (IANA) as a central registry for suchto be followed when new URLscheme names and the IETFschemes are created. A separate document, RFCmechanism[URL-GUIDELINES], Guidelines forscheme review, where appropriate.URL Schemes [2], provides guidelines for the creation of new URL schemes. The primary focus of this document is on the <scheme> portion of new URL schemes, referred to as the "scheme name" throughout this document. 2.0 URL Scheme Name Registration Trees 2.1 General In order to increase the efficiency and flexibility of the URL scheme name registration process,severaltwo different registration "trees" have been created. The registration requirements and specific registration procedures for each tree differ, allowing the overall registration procedure to accommodate the different natural requirements for URL schemes. For example, a scheme that will be recommended for wide support and implementation by the InternetCommunitycommunity requires a more completereview, prior to registration,review than a scheme intended to be used for resources associated with proprietary software.Each of the URL scheme name registration trees also imparts a specific syntax to the scheme name being registered. Registration of a new URL scheme name may occur in any ONE of the established registration trees.The first step in registering a new URL scheme name is to determine which registration tree the scheme should be registered in. Determination of the proper registration tree is based on the intended use for the newscheme,scheme and the desired syntax for the schemename, and the ability to meet the registration requirements for the desired tree.name. Note that some URL schemes defined prior to this document do not conform to the naming conventions described below. See Appendix A for a discussion of those schemes.The following subsections define the registration trees available at this time, the purpose of each tree, the requirements for registration in each tree, and the associated URL scheme name formats that are applied to names registered in each tree. 2.1 General Requirements All new URL scheme NAMES, regardless of registration tree, MUST conform to the syntax specified in RFC [URI-SYNTAX] for scheme names.2.2 The IETF Tree2.2.1 PurposeThe IETF tree is intended for URL schemes of general interest to the InternetCommunity.community. The tree exists for URL schemes that require a substantive review and approvalprocess; the vendor and personal trees exist for those that do not.process. It is expected that applicability statements for particular applications will be published from time to time that recommend implementation of, and support for, URL schemes that have proven particularly useful in those contexts.2.2.2 Registration Requirements Registration in the IETF2.3 The OID Tree The OID treerequires approval by the IESG and publication of theis intended for URL schemes which will be used in a proprietary manner. The trees exists to provide a mechanism for ensuring that scheme names do not collide. The syntax and semanticsas some formofRFC, usually a standards track RFC. All newURL schemesregisteredcreated in theIETF tree, MUST conformOID tree do not have to be reviewed or publicly disclosed. Creating a URL scheme name in thegenericOID tree does not imply endorsement, approval, or recommendation by the IETF or even certification that the specification is adequate, even if the scheme was published as an IETF Internet-Draft and/or reviewed by IETF participants. To become Internet Standards, protocols, data objects, or whatever must go through the IETF standards process and registration in the IETF tree. 2.4 Additional Registration Trees From time to time and as required by the community, the IESG may create new top-level registration trees. 3.0 Requirements for Scheme Name Registration 3.1 General Requirements All new URL scheme NAMES, regardless of registration tree, MUST conform to the syntax specified in RFC 2396 for scheme NAMES. 3.2 The IETF Tree Registration in the IETF tree requires publication of the URL scheme syntax and semantics in either an Informational or Standards Track RFC. In addition to having a conforming scheme NAME (see section 3.1), all new URL schemes registered in the IETF tree, MUST conform to the generic syntax for URLs as specified in RFC[URI-SYNTAX].2396. An analysis of the security issues inherent in the new URL scheme is REQUIRED. (This is in accordance with the basic requirements for all IETF protocols.) There is absolutely no requirement that all URL schemes registered in the IETF tree be secure or completely free from risks. Nevertheless, all known security risks must be identified. Thesecurity considerations section of all registrations is subject to continuing evaluation and modification, and in particular may be extended by use of the "comments on URL scheme names" mechanism described in section 4.0. 2.2.3 Ownership The"owner" of a URL scheme nameregistrationregistered in the IETF tree is assumed to be the IETF itself. Modification or alteration of the specification requires the same level of processing (e.g.standards track)Informational or Standards Track RFC) asrequiredused for the initial registration.2.2.4 SyntaxSchemes originally defined via an Informational RFC may, however, be replaced with Standards Track documents. 3.3 The OID Tree While public exposure and review ofURL Scheme Namesa URL schemenamescreated in theIETF tree are normally denoted by names that are not explicitly faceted, i.e., do not contain period (".") characters. For example, "http", "ftp", "mailto", etc. 2.3 The Vendor Tree 2.3.1 Purpose The vendorOID tree isusednot required, using the IETF Internet-Draft mechanism for peer review is strongly encouraged to improve the quality of the specification. RFC publication of OID tree URL schemesassociated with commercially available products. "Vendor" or "producer" are construed as equivalent and very broadly in this context. A registration may be placed in the vendor tree by anyone who needs to identify a scheme for (1) specifying the location of a resource available via the Internet (2) which may be accessed using a protocol (or mechanism) for which there is not currently a URL scheme registered in the IETF tree. The registration of a URL scheme name in the vendor tree does not imply endorsement, approval, or recommendation by IANA or IETF or even certification that the specification is adequate. To become Internet Standards, protocol, data objects, or whatever must go through the IETF standards process and the registration in the IETF tree. 2.3.2 Registration Requirements RFC publication of vendor URL schemes is encouraged but not required. Material may be publishedis encouraged but not required. Material may be published as an Informational RFC by sending it to the RFC Editor (please follow the instructions to RFC authors,RFC-2223RFC 2223 [3]).While public exposure and review of URL scheme names to be registered in the vendor tree is not required, using the ietf-url-schemes list for review is strongly encouraged to improve the quality of those specifications.URL schemesregisteredcreated in thevendorOID tree are encouraged to conform to the generic URLsyntaxsyntax, RFC 2396, but are not required to doso in order to be registered.so. All new URL schemes SHOULD follow the Guidelines for URL Schemes, set forth in RFC [URL-GUIDELINES] [2]. While not required, an analysis of the security issues inherent in the new URL scheme is encouraged. Regardless of what security analysis is or is not performed, all descriptions of security issues must be as accurate as possible. In particular, a statement that there are "no security issues associated with this scheme" must not be confused with "the security issues associates with this scheme have not been assessed". There is absolutely no requirement that URL schemesregisteredcreated in thevendorOID tree be secure or completely free from risks. Nevertheless, all known security risks SHOULD beidentified in the registration.identified. Thesecurity considerations section of all registrations is subject to continuing evaluation and modification, and in particular may be extended by useregistration ofthe "comments ona URL schemename" mechanism describedcreated insection 4.0. 2.3.3 Ownership of Registration The registrationthe OID tree formally belongs to thevendor or organization registeringentity to which thescheme name.OID is assigned. Changes to the specificationwillof an OID tree URL scheme which is documented by an Informational RFC shall only bemade at their request, as discussed in subsequent sections. 2.3.4 Syntaxaccepted from the owner of the OID or with the permission of the owner of the OID. The syntax of URLScheme Names Registrationsscheme names for schemes created in thevendorOID treewill be distinguished byis simply theleading facet "vnd.". That must betext string "OID-" followed byan IANA-approved designation oftheproducer's name, which is then followed by anumeric OID including any embedded hyphens. URL schemename or product designation (e.g. vnd.bigcompany.telepathic). IANA will assign unique designations for producer names, ("bigcompany" in the example above). Accordingly, once a producer has successfully registered a scheme name, (e.g. "vnd.bigcompany.telepathic"), only registrations for new scheme names that originate from "bigcompany" will begin with "vnd.bigcompany.". 2.4 The Personal or Private Tree 2.4.1 Purpose Registrations for URL schemes created experimentally or as part of products that are not distributed commercially may be registered in the personal tree. Unlike the IETF and vendor trees which guarantee the uniqueness of registered scheme names, registrations in the personal tree are NOT guaranteed to be unique. Multiple sites may register the same scheme name but use it in different (and incompatible) ways. The registration of a URL scheme name in the personal tree does not imply endorsement, approval, or recommendation by IANA or IETF or even certification that the specification is adequate. To become Internet Standards, protocol, data objects, or whatever must go through the IETF standards process and the registration in the IETF tree. 2.4.2 Registration Requirements RFC publication of personal URL schemes is encouraged but not required. Materials may be published as an Informational RFC by sending it to the RFC Editor (please follow the instructions to RFC authors, RFC-2223 [3]). While public exposure and review of URL scheme names to be registered in the personal tree is not required, using the ietf-url-schemes list for review is strongly encouraged to improve the quality of those specifications. URL schemes registered in the personal tree are encouraged to conform to the generic URL syntax but are not required to do so in order to be registered. All new URL schemes SHOULD follow the Guidelines for URL Schemes, set forth in RFC [URL-GUIDELINES] [2]. While not required, an analysis of the security issues inherent in the new URL scheme is encouraged. Regardless of what security analysis is or is not performed, all descriptions of security issues must be as accurate as possible. In particular, a statement that there are "no security issues associated with this scheme" must not be confused with "the security issues associates with this scheme have not been assessed". There is absolutely no requirement that URL schemes registered in the personal tree be secure or completely free from risks. Nevertheless, all known security risks SHOULD be identified in the registration. The security considerations section of all registrations is subject to continuing evaluation and modification, and in particular may be extended by use of the "comments on URL scheme name" mechanism described in section 4.0. 2.4.3 Ownership of Registration The owner of "personal" registrations and associated specifications is the person or entity making the registration, or one to whom responsibility has been transferred as described below. 2.4.4 Syntax of URL Scheme Names Registrations in the personal tree are distinguished by the leading facet "prs.". For example, "prs.fiberreflection". 2.5 Additional Registration Trees From time to time and as required by the community, the IANA may, with the advice and consent of the IESG, create new top-level registration trees. It is explicitly assumed that these trees may be created for external registration and management by well-known permanent bodies, such as scientific societies, for URL schemes specific to the sciences they cover. In general, the quality of review of specifications for one of these additional registration trees is expected to be equivalent to that which IETF would give to registrations in its own tree. Establishment of these new trees will be announced through RFC publication approved by the IESG. 3.0 Registration Procedures The following sections detail the procedures to follow to register a new URL scheme name in a specific registration tree. With the exception of registration in the IETF tree, these procedures are not a formal standards process, but rather an administrative procedure intended to allow community comment and sanity checking without excessive time delay. 3.1 The IETF Tree Complete the registration template (section 7.0 of this document) and submit it to the IESG for review. Generally the details of the proposed new URL scheme should already be documented in an Internet-Draft and the registration template should reference this draft. The IESG will review the proposed new scheme and either refer the scheme to a working group (existing or new) or directly present the registration and associated documentation to the IESG for a last call. In the former case, the working group is responsible for re-submitting it to the IESG for approval at such time as it has received adequate review and deliberation. After the IESG has approved the registration, it will forward the registration paperwork and documentation to IANA for publication on the ietf-url-schemes list and official registration in the IETF tree. Authors proposing new URL schemes for the IETF tree are encouraged to present the proposed schemes to the IETF as a whole, via the Internet-Drafts mechanism, well in advance of submission to the IESG. 3.2 The Vendor Tree Complete the registration template (section 7.0 of this document) as completely as possible. While not required, it is recommended and encouraged that vendors submit a copy of the completed registration template (which includes references to any additional documentation), to the ietf-url-schemes list for peer review and comment. The quality of URL schemes can usually be improved through such a process. The amount of feedback received regarding the proposed scheme should serve as an indication of how long to keepnames are case insensitive so theproposalletters inpeer review before proceeding with the registration. Forward the completed registration template to IANA (iana@iana.org). IANA will review the registration template to ensure that it meetstherequirements necessary for registration. If it doestext string "OID-" need notmeet the necessary requirements, the application will be rejected and returned to the submitter and the registration process willbeterminated. Authors may choose to amend the information presentedcapitalized. No variations on this formula are permitted. Examples of valid URL scheme names in theregistration template and re-submit it to IANA who will treat the re-submission asOID tree: OID-2-16-840-1-113779-2-1: Oid-2-16-840-1-113779-2-1-100: OiD-2-16-840-1-113779-3: oid-2-16-840-1-113779-123: 4.0 Registration Procedures 4.1 The IETF Tree The first step in registering a newregistration request. IANA will assign the unique designation for the producer's name at this time if one has not already been assigned to the producer making the registration request. Regardless of whether or not the accepted registration template has previously been posted to the ietf-url-schemes list for review, IANA will postURL scheme in thetemplateIETF tree is tothe list along withpublish anindication thatIETF Internet-Draft detailing thetemplate has been officially received by IANA for registration. IANA will then wait for two (2) weeks for comments onsyntax andcommunity reviewsemantics of theregistration request.proposed scheme. Theintent of the public posting is to solicit comments and feedback on the choicedraft must, minimally, address all ofscheme name,thesyntax and semantics ofitems covered by thescheme, and a review of any interoperability or security considerations (if such information is disclosedtemplate provided inthe application or associated documentation). IANA will forwardsection 6 of this document. After allcomments receivedissues raised duringthisa review periodto the person designated as the contact person in the registration template. The submitter mayof no less than 4 weeks have been addressed, submita revised registration, or withdrawtheregistration completely, at any time. Afterdraft to thetwo weekIESG for review. The IESG will reviewperiod has expired, IANA shall registertheURLproposed new schemename inand either refer the scheme to a working group (existing or new) or directly present thevendor tree. URLschemenames proposedtothis mailing list are not formally registered and should not be used untiltheregistration procedure is completed by IANA. 3.3 The Personal Tree The registration procedureIESG forURL scheme names ina last call. In thepersonal treeformer case, the working group isidentical as that specifiedresponsible forthe vendor tree with the exception of IANA assigning the vendorsubmitting aunique name. 4.0 Comments on URL Scheme Name Registrations Comments on registered URL scheme names may be submitted by membersfinal version of thecommunity to IANA. These comments will be passed ondraft to the"owner"IESG for approval at such time as it has received adequate review and deliberation. 4.2 The OID Tree Registration oftheURL schemes created in the OID tree is automatic because the scheme nameif possible. Submitters of comments may request that their comment be attachedis based on a previously registered entity, an OID. There is no requirement to publish any documentation for the URLscheme name registration itself, and if IANA approves of this the comment willscheme, however, doing so may bemade accessible in conjunction with the scheme name registration itself. 5.0 Change Control Onceadvantageous and is encouraged. The recommended form for documenting a URL schemename has been published by IANA, the owner ofcreated in thescheme name may request a change to its definition.OID tree is via an Informational RFC. ThedescriptionsRFC should address all of thedifferent registration trees above designateitems covered by theowners of each typetemplate provided in section 6 ofregistration. The change request follows the same procedure asthis document. 5.0 Change Control 5.1 Schemes in theregistration request: (1) CompleteIETF Tree URL schemes created in theregistration template. (2) PublishIETF tree are "owned" by therevised scheme syntaxIETF itself andsemantics on the ietf-url-schemes list if peer review is requested. (3) Submitmay be changed, as needed, by updating therevised registration to IANA. Changes shouldRFC that describes them. Schemes described by Standards Track RFC but berequested only when there are serious omissionreplaced with new Standards Track RFCs. Informational RFCs may be replaced by new Informational RFCs orerrorsStandards Track RFCs. 5.2 Schemes in the OID Tree Undocumented URL schemes created in the OID tree may be changed by their owner at any time without notifying the IETF. URL schemes created in thepublished specification. When review is required, a change requestOID tree that have been documented by an Informational RFC, may bedenied if it renders entities that were valid underchanged at any time by theprevious definition invalid underowner, however, an updated Informational RFC which details thenew definition.changes made, must be submitted to the IESG. The owner of a URL schemeregistrationregistered in the OID tree and documented by an Informational RFC may pass responsibility for the registration to another person or agency by informingIANA andtheietf-url-schemes list; this can be done without discussion or review.IESG. The IESG may reassign responsibility for a URL schemename.registered in the OID tree and documented by an Informational RFC. The most common case of this will be to enable changes to be made to schemes where theauthorowner of theregistrationOID has died, moved out of contact or is otherwise unable to make changes that are important to the community.URL scheme name registrationsThe IESG maynot be deleted; URL scheme names which are no longer believed appropriate for use can be declared OBSOLETE byreclassify achange to their "intended use" field; suchURL schemenames will be clearly marked in the lists published by IANA. 6.0 IANA Considerations 6.1 Discussion List A discussion list named "ietf-url-schemes" needs to becreatedand maintained at "iana.org". The list MUST be open and MUST NOT require the submitter to be subscribed to the list in order to process a post. 6.2 Location of Registered URL Scheme Name List URL scheme name registrations need to be posted in the anonymous FTP directory "ftp://ftp.isi.edu/in-notes/iana/assignments/URL-scheme-names/". 6.3 Procedures for Registering URL Scheme Names Scheme names in the IETF tree will only be registered in response to a communication from the IESG stating that a given registration has been approved. Scheme namesin thevendorOID treewill be registered automatically providedand documented via an Informational RFC as "historic" if it determines that theregistration template contains at least the information specified below. Assignment of uniqueschemenames shall be on a first come, first served basis. Scheme namesis no longer inthe personal tree will be registered automatically provided that the registration template contains at least the information specified below. No attempt shall be made to prevent multiple applications from registering the same scheme name even if the use of the schemes are different and incompatible.use. 6.0 Registration Template The followingminimal information mustissues should bespecified foraddressed when documenting aregistration in the vendor or personal tree: Scheme Name Syntax: The syntax of the requestednew URL scheme: URL schemename (including the assigned producer designationname. URL scheme syntax. This should be expressed inthe casea clear and concise manner. The use ofvendor tree registrations), MUST conformABNF is encouraged. Please refer tothe syntaxRFC [URL-GUIDELINES] forsuch as specifiedguidance on designing and explaining your scheme's syntax. Character encoding considerations. It is important to identify what your scheme supports inRFC [URI-SYNTAX]. While encouragedthis regard. It is obvious that for interoperability, it is best if there is a means todo so, the syntaxsupport character sets beyond USASCII, but especially forthe actual scheme doesprivate schemes, this may nothave to conform tobe thegeneral syntax specified in RFC [URI-SYNTAX]. Security Considerations: The application for registrationcase. Intended usage. What sort of resource is being identified? If this is not ascheme name MUST include a discussion'resource' type of URL (e.g. mailto:), explain thesecurity considerations inherent in the scheme. Contact Person: The application MUST include accurate information regarding a person to contact about the registration. Author/Change Controller: The application MUST specifyaction that should be initiated by theauthor and/or entity responsible for change controlconsumer of theproposed scheme. 7.0 Registration Template To: iana@iana.org Subject: Registration of URL Scheme Name <name> URL Scheme Name: Character encoding considerations: Security considerations: Interoperability considerations: Published specification:URL. If there is a MIME type associated with this resource, please identify it. Applications and/or protocols which use this URL schemename: Additional information:name. Interoperability considerations. If you are aware of any details regarding your scheme which might impact interoperability, please identify them here. For example: proprietary or uncommon encoding method; inability to support multibyte character sets; incompatibility with types or versions of underlying protocol (if scheme is tunneled over another protocol). Security considerations. Relevant publications. Person & email address to contact for furtherinformation: Intended usage: (One of COMMON, LIMITED USE or OBSOLETE)information. Author/Changecontroller: (Any other information that the author deems interesting may be added belowcontroller. Applications and/or protocols which use thisline.) 8.0URL scheme name. 7.0 Security Considerations Information that creates or updates a registration needs to be authenticated. Information concerning possible security vulnerabilities of a protocol may change over time. Consequently, claims as to the security properties of a registered URL scheme may change as well. As new vulnerabilities are discovered, information about such vulnerabilities may need to be attached to existingregistrations,documentation, so that users are not misled as to the true security properties of a registered URL scheme.Delegations of a name space should only be assigned to someone with adequate security. 9.08.0 References [1] Berners-Lee, T., Fielding, R., Masinter, L., "Uniform Resource Identifiers (URI): Generic Syntax", RFC[URI-SYNTAX],2396, August 1998 [2] Masinter, L., Alvestrand, H., Zigmond, D., Petke, R., "Guidelines for new URL Schemes", RFC [URL-GUIDELINES], August 1998 [3] Postel, J., Reynolds, J., "Instructions to RFC Authors", RFC 2223, October 1997.10.09.0 Author's Address Rich PetkeWorldComMCIWORLDCOM Advanced Networks 5000 Britton Road P. O. Box 5000 Hilliard, OH 43026-5000 USA Phone: +1 614 723 4157 Fax: +1 614 72313338407 EMail:rpetke@compuserve.netrpetke@wcom.net Appendix A -- Grandfathered URL Scheme Names A number of URL scheme names, in use prior to 1998, would, if registered under the procedures specified in this document, be placed intoeitherthevendor or personal trees.OID tree. Re-registration of those types to reflect the appropriatetreestree or documentation of the schemes in an Informational RFC is encouraged, but not required. Ownership and change control principles outlined in this document apply to those types as if they had been registered in thetrees described above.OID tree. ABOUT: (No information available at this time.) AOL: (No information available at this time.) ----