view Side-By-Side changes
Network Working Group M. DuerstInternet-DraftRequest for Comments: 3987 W3CExpires: May 31, 2005Category: Standards Track M. Suignard Microsoft CorporationNovember 30, 2004January 2005 Internationalized Resource Identifiers (IRIs)draft-duerst-iri-11Status ofthisThis Memo This documentisspecifies anInternet-Draft and is subject to all provisions of section 3 of RFC 3667. By submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she is aware have been or will be disclosed, and any of which he or she become aware will be disclosed, in accordance with RFC 3668. Internet-Drafts are working documents ofInternet standards track protocol for the InternetEngineering Task Force (IETF), its areas,community, andits working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents validrequests discussion and suggestions fora maximumimprovements. Please refer to the current edition ofsix monthsthe "Internet Official Protocol Standards" (STD 1) for the standardization state andmay be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The liststatus ofcurrent Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The listthis protocol. Distribution ofInternet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on May 31, 2005.this memo is unlimited. Copyright Notice Copyright (C) The Internet Society(2004).(2005). Abstract This document defines a new protocol element, the Internationalized Resource Identifier (IRI), as a complement to the Uniform Resource Identifier (URI). An IRI is a sequence of characters from the Universal Character Set (Unicode/ISO 10646). A mapping from IRIs to URIs is defined, which means that IRIs can be used instead ofURIsURIs, whereappropriateappropriate, to identify resources.Duerst & Suignard Expires May 31, 2005 [Page 1] Internet-Draft Internationalized Resource Identifiers November 2004The approach of defining a new protocol element waschosen,chosen instead of extending or changing the definition ofURIs,URIs. This was done in order to allow a clear distinction and to avoid incompatibilities with existing software. Guidelines are provided for the use and deployment of IRIs in various protocols, formats, and software components thatnowcurrently deal withURIs are provided.URIs. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . .4 1.13 1.1. Overview and Motivation . . . . . . . . . . . . . . . .. 4 1.23 1.2. Applicability . . . . . . . . . . . . . . . . . . . . .. 4 1.33 1.3. Definitions . . . . . . . . . . . . . . . . . . . . . .. 5 1.44 1.4. Notation . . . . . . . . . . . . . . . . . . . . . . . .. 65 2. IRI Syntax . . . . . . . . . . . . . . . . . . . . . . . . . .7 2.16 2.1. Summary of IRI Syntax . . . . . . . . . . . . . . . . .. 7 2.26 2.2. ABNF for IRI References and IRIs . . . . . . . . . . . .. 87 Duerst & Suignard Standards Track [Page 1] RFC 3987 Internationalized Resource Identifiers January 2005 3. Relationship between IRIs and URIs . . . . . . . . . . . . . . 103.13.1. Mapping of IRIs to URIs . . . . . . . . . . . . . . . .. 11 3.210 3.2. Converting URIs to IRIs . . . . . . . . . . . . . . . ..143.2.13.2.1. Examples . . . . . . . . . . . . . . . . . . . .. . .15 4. Bidirectional IRIs forRight-to-left LanguagesRight-to-Left Languages. . . . . . . .. 17 4.116 4.1. Logical Storage and Visual Presentation . . . . . . . ..174.24.2. Bidi IRI Structure . . . . . . . . . . . . . . . . . . ..184.34.3. Input of Bidi IRIs . . . . . . . . . . . . . . . . . . .. 20 4.419 4.4. Examples . . . . . . . . . . . . . . . . . . . . . . . .. 2019 5. Normalization and Comparison . . . . . . . . . . . . . . . . .22 5.121 5.1. Equivalence . . . . . . . . . . . . . . . . . . . . . ..225.25.2. Preparation for Comparison . . . . . . . . . . . . . . .. 23 5.322 5.3. Comparison Ladder . . . . . . . . . . . . . . . . . . ..235.3.15.3.1. Simple String Comparison . . . . . . . . . . . .. . . 24 5.3.2 Syntax-based23 5.3.2. Syntax-Based Normalization . . . . . . . . . . .. . . 25 5.3.3 Scheme-based24 5.3.3. Scheme-Based Normalization . . . . . . . . . . .. . .275.3.4 Protocol-based5.3.4. Protocol-Based Normalization . . . . . . . . . .. . . 2928 6. Use of IRIs . . . . . . . . . . . . . . . . . . . . . . . . . 296.16.1. Limitations on UCS Characters Allowed in IRIs . . . . ..296.26.2. Software Interfaces and Protocols . . . . . . . . . . .. 30 6.329 6.3. Format of URIs and IRIs in Documents and Protocols . . ..306.46.4. Use of UTF-8 for Encoding Original Characters. ... . . . . 306.56.5. Relative IRI References . . . . . . . . . . . . . . . ..32 7. URI/IRI Processing Guidelines (informative) . . . . . . . . . 327.17.1. URI/IRI Software Interfaces . . . . . . . . . . . . . ..327.27.2. URI/IRI Entry . . . . . . . . . . . . . . . . . . . . ..337.37.3. URI/IRI TransferBetweenbetween Applications . . . . . . . . .. 34 7.433 7.4. URI/IRI Generation . . . . . . . . . . . . . . . . . . ..347.57.5. URI/IRI Selection . . . . . . . . . . . . . . . . . . .. 35 7.634 7.6. Display of URIs/IRIs . . . . . . . . . . . . . . . . . ..357.77.7. Interpretation of URIs and IRIs . . . . . . . . . . . ..36Duerst & Suignard Expires May 31, 2005 [Page 2] Internet-Draft Internationalized Resource Identifiers November 2004 7.87.8. Upgrading Strategy . . . . . . . . . . . . . . . . . . ..36 8. Security Considerations . . . . . . . . . . . . . . . . . . . 37 9.IANA Considerations .Acknowledgements . . . . . . . . . . . . . . . . . . . .39 10. Acknowledgements. . . 39 10. References . . . . . . . . . . . . . . . . . . .39 11. References. . . . . . . 40 10.1. Normative References . . . . . . . . . . . . . . . . . .39 11.1 Normative40 10.2. Informative References . . . . . . . . . . . . . . . . .. . . 39 11.2 Non-normative References . . . . . . .41 A. Design Alternatives . . . . . . . . . . .41 Authors' Addresses. . . . . . . . . . 44 A.1. New Scheme(s) . . . . . . . . . . . .43 A. Design Alternatives. . . . . . . . . 44 A.2. Character Encodings Other Than UTF-8 . . . . . . . . . . 44 A.3. New Encoding Convention . .43 A.1 New Scheme(s). . . . . . . . . . . . . . 44 A.4. Indicating Character Encodings in the URI/IRI . . . . . 45 Authors' Addresses . . .43 A.2 Other Character Encodings than UTF-8. . . . . . . . . . .44 A.3 New Encoding Convention. . . . . . . . . . 45 Full Copyright Statement . . . . . . .44 A.4 Indicating Character Encodings in the URI/IRI. . . . . .44 Intellectual Property and Copyright Statements. . . . . . . .4546 Duerst & SuignardExpires May 31, 2005Standards Track [Page3] Internet-Draft2] RFC 3987 Internationalized Resource IdentifiersNovember 2004January 2005 1. Introduction1.11.1. Overview and Motivation A Uniform Resource Identifier (URI) is defined in[RFCYYYY][RFC3986] as a sequence of characters chosen from a limited subset of the repertoire of US-ASCII [ASCII] characters. The characters in URIs are frequently used for representing words of natural languages.SuchThis usage has many advantages:suchSuch URIs are easier to memorize, easier to interpret, easier to transcribe, easier to create, and easier to guess. For most languages other than English, however, the natural script uses characters other thanA-Z.A - Z. For many people, handling Latin characters is as difficult as handling the characters of other scripts is forpeoplethose who use only the Latin alphabet. Many languages with non-Latin scriptshave transcriptions toare transcribed with Latin letters.SuchThese transcriptions are now often used in URIs, but they introduce additional ambiguities. The infrastructure for the appropriate handling of characters from local scripts is now widely deployed in local versions of operating system and application software. Software that can handle a wide variety of scripts and languages at the same time is increasinglywidespread.common. Also,there areincreasing numbers of protocols and formatsthatcan carry a wide range of characters. This document defines a new protocolelement,element called Internationalized Resource Identifier(IRI),(IRI) by extending the syntax of URIs to a much wider repertoire of characters. It also defines "internationalized" versions corresponding to other constructs from[RFCYYYY],[RFC3986], such as URI references. The syntax of IRIs is defined inSectionsection 2, and the relationship between IRIs and URIs inSectionsection 3. Using characters outside ofA-ZA - Z in IRIs bringswith itsome difficulties. Section 4 discusses the special case of bidirectional IRIs,Sectionsection 5 various forms of equivalence between IRIs, andSectionsection 6 the use of IRIs in different situations. Section 7 gives additional informative guidelines, andSectionsection 8 security considerations.1.21.2. Applicability IRIs are designed to be compatible with recommendations for new URI schemes [RFC2718]. The compatibility is provided by specifying awell definedwell-defined and deterministic mapping from the IRI character sequence to the functionally equivalent URI character sequence. Practical use of IRIs (or IRI references) in place of URIs (or URI references) depends on the following conditions being met: Duerst & SuignardExpires May 31, 2005Standards Track [Page4] Internet-Draft3] RFC 3987 Internationalized Resource IdentifiersNovember 2004 a) TheJanuary 2005 a. A protocol or format elementwhere IRIs are usedshould be explicitly designated to be able to carry IRIs.That is, theThe intent is not to introduce IRIs into contexts that are not defined to accept them. For example, XML schema [XMLSchema] has an explicit type "anyURI" that includes IRIs and IRI references. Therefore, IRIs and IRI references can be in attributes and elements of type "anyURI". On the other hand, in the HTTP protocol [RFC2616], the Request URI is defined asana URI, which means that direct use of IRIs is not allowed in HTTP requests.b)b. The protocol or format carrying the IRIs should have a mechanism to represent the wide range of characters used in IRIs, either natively or by some protocol- or format-specific escaping mechanism (forexampleexample, numeric character references in [XML1]).c)c. The URI corresponding to the IRI in question has to encode original characters into octets using UTF-8. For new URI schemes, this is recommended in [RFC2718]. It can apply to a whole scheme(e.g.(e.g., IMAP URLs [RFC2192] and POP URLs [RFC2384], or the URN syntax [RFC2141]). It can apply to a specific part of a URI, such as the fragment identifier(e.g.(e.g., [XPointer]). It can apply to a specific URI or part(s) thereof. For details, please seeSectionsection 6.4.1.31.3. Definitions The following definitions are used in this document; they follow the terms in [RFC2130],[RFC2277][RFC2277], and[ISO10646]:[ISO10646]. character: A member of a set of elements used for the organization, control, or representation of data. For example, "LATIN CAPITAL LETTER A" names a character. octet: An ordered sequence of eight bits considered as aunitunit. character repertoire: A set of characters (in the mathematicalsense)sense). sequence of characters: A sequence(one after another)of characters (one after another). sequence of octets: A sequence(one after another)of octets (one after another). character encoding: A method of representing a sequence of characters as a sequence of octets (maybe with variants).AAlso, a method of (unambiguously) converting a sequence of octets into a sequence of characters. Duerst & SuignardExpires May 31, 2005Standards Track [Page5] Internet-Draft4] RFC 3987 Internationalized Resource IdentifiersNovember 2004January 2005 charset: The name of a parameter or attribute used to identify a character encoding. UCS: Universal CharacterSet; theSet. The coded character set defined byISO/ IECISO/IEC 10646 [ISO10646] and the Unicode Standard [UNIV4]. IRI reference:The term "IRI reference" denotesDenotes the common usage of an Internationalized Resource Identifier. An IRI reference may be absolute or relative. However, the "IRI" that results from such a reference only includes absolute IRIs; any relative IRI references are resolved to their absolute form. Note that in[RFC2396],[RFC2396] URIs did not include fragment identifiers, but in[RFCYYYY],[RFC3986] fragment identifiers are part of URIs. running text: Human text (paragraphs, sentences, phrases) with syntax according to orthographic conventions of a natural language, as opposed to syntax defined for ease of processing by machines(markup,(e.g., markup, programminglanguages,...).languages). protocol element: Any portion of a messagewhichthat affects processing of that message by the protocol in question. presentation element:PresentationA presentation form corresponding to a protocolelement,element; forexampleexample, using a wider range of characters. create(an(a URI or IRI): With respect to URIs and IRIs, theword 'create'term is used for the initial creation. This may be the initial creation of a resource with a certain identifier, or the initial exposition of a resource under a particular identifier. generate(an(a URI or IRI): With respect to URIs and IRIs, theword 'generate'term is used when the IRI is generated by derivation from other information.1.41.4. Notation RFCs and Internet Drafts currently do not allow any characters outside the US-ASCII repertoire. Therefore, this document uses various special notations to denote such characters in examples. In text, characters outside US-ASCII are sometimes referenced by using a prefix of 'U+', followed by four to six hexadecimal digits. To represent characters outside US-ASCII in examples, this document uses twonotations callednotations: 'XML Notation' and 'Bidi Notation'. Duerst & Suignard Standards Track [Page 5] RFC 3987 Internationalized Resource Identifiers January 2005 XML Notation uses a leading '&#x', a trailing ';', and the hexadecimalDuerst & Suignard Expires May 31, 2005 [Page 6] Internet-Draft Internationalized Resource Identifiers November 2004number of the character in the UCS in between.Example:For example, я stands for CYRILLIC CAPITAL LETTER YA. In this notation, an actual '&' is denoted by '&'. Bidi Notation is used for bidirectional examples:lower caseLowercase letters stand for Latin letters or other letters that are writtenleft-to-right,left to right, whereasupper caseuppercase letters represent Arabic or Hebrew letters that are writtenright-to-left.right to left. To denote actual octets in examples (as opposed to percent-encoded octets), the two hex digits denoting the octet are enclosed in "<" and ">". For example, the octet often denoted as 0xc9 is denoted here as <c9>.TheIn this document, the key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL"in this documentare to be interpreted as described in [RFC2119]. 2. IRI Syntax This section defines the syntax of Internationalized Resource Identifiers (IRIs). As with URIs, an IRI is defined as a sequence of characters, not as a sequence of octets. This definition accommodates the fact that IRIs may be written on paper or read over the radio as well asbeingstored or transmitted digitally. The same IRI may be represented as different sequences of octets in different protocols or documents if these protocols or documents use different character encodings(and/ or(and/or transfer encodings). Using the same character encoding as the containing protocol or documentassuresensures that the characters in the IRI can be handled(searched,(e.g., searched, converted,displayed,...)displayed) in the same way as the rest of the protocol or document.2.12.1. Summary of IRI Syntax IRIs are defined similarly to URIs in[RFCYYYY],[RFC3986], but the class of unreserved characters is extended by adding the characters of the UCS (Universal Character Set, [ISO10646]) beyond U+007F, subject to the limitations given in the syntax rules below and inSectionsection 6.1. Otherwise, the syntax and use of components and reserved characters is the same as that in[RFCYYYY].[RFC3986]. All the operations defined in[RFCYYYY],[RFC3986], such as the resolution of relative references, can be applied to IRIs by IRI-processing software in exactly the same way asthis is done tothey are for URIs by URI-processing software. Duerst & Suignard Standards Track [Page 6] RFC 3987 Internationalized Resource Identifiers January 2005 Characters outside the US-ASCII repertoire are not reserved andDuerst & Suignard Expires May 31, 2005 [Page 7] Internet-Draft Internationalized Resource Identifiers November 2004therefore MUST NOT be used for syntacticalpurposespurposes, such as to delimit components in newly defined schemes.As anFor example,it is not allowed to useU+00A2, CENT SIGN, is not allowed as a delimiter in IRIs, because it is in the 'iunreserved'category, incategory. This is similar to thesame way asfact that it is not possible to use '-' as adelimiter,delimiter in URIs, because it is in the 'unreserved'category in URIs. 2.2category. 2.2. ABNF for IRI References and IRIsWhileAlthough it might be possible to define IRI references and IRIs merely by their transformation to URI references and URIs, they can also be accepted and processed directly. Therefore, an ABNF definition for IRI references (which are the most general concept and the start of the grammar) and IRIs is given here. The syntax of this ABNF is described in [RFC2234]. Character numbers are taken from the UCS, without implying any actual binary encoding. Terminals in the ABNF are characters, not bytes. The following grammar closely follows the URI grammar in[RFCYYYY],[RFC3986], except that the range of unreserved characters is expanded to include UCS characters, with the restriction that private UCS characters can occur only in queryparts and not elsewhere.parts. The grammar is split into twoparts, rulesparts: Rules that differ from[RFCYYYY][RFC3986] because of the above-mentioned expansion, and rules that are the same as those in[RFCYYYY].[RFC3986]. For rules that are different than those in[RFCYYYY],[RFC3986], the names of the non-terminals have been changed asfollows:follows. If the non-terminal contains 'URI', this has been changed to 'IRI'. Otherwise, an 'i' has been prefixed. The following rules are different from[RFCYYYY]:those in [RFC3986]: IRI = scheme ":" ihier-part [ "?" iquery ] [ "#" ifragment ] ihier-part = "//" iauthority ipath-abempty / ipath-absolute / ipath-rootless / ipath-empty IRI-reference = IRI / irelative-ref absolute-IRI = scheme ":" ihier-part [ "?" iquery ] irelative-ref = irelative-part [ "?" iquery ] [ "#" ifragment ] irelative-part = "//" iauthority ipath-abempty / ipath-absolute/ ipath-noschemeDuerst & SuignardExpires May 31, 2005Standards Track [Page8] Internet-Draft7] RFC 3987 Internationalized Resource IdentifiersNovember 2004January 2005 / ipath-noscheme / ipath-empty iauthority = [ iuserinfo "@" ] ihost [ ":" port ] iuserinfo = *( iunreserved / pct-encoded / sub-delims / ":" ) ihost = IP-literal / IPv4address / ireg-name ireg-name = *( iunreserved / pct-encoded / sub-delims ) ipath = ipath-abempty ; begins with "/" or is empty / ipath-absolute ; begins with "/" but not "//" / ipath-noscheme ; begins with a non-colon segment / ipath-rootless ; begins with a segment / ipath-empty ; zero characters ipath-abempty = *( "/" isegment ) ipath-absolute = "/" [ isegment-nz *( "/" isegment ) ] ipath-noscheme = isegment-nz-nc *( "/" isegment ) ipath-rootless = isegment-nz *( "/" isegment ) ipath-empty = 0<ipchar> isegment = *ipchar isegment-nz = 1*ipchar isegment-nz-nc = 1*( iunreserved / pct-encoded / sub-delims / "@" ) ; non-zero-length segment without any colon ":" ipchar = iunreserved / pct-encoded / sub-delims / ":" / "@" iquery = *( ipchar / iprivate / "/" / "?" ) ifragment = *( ipchar / "/" / "?" ) iunreserved = ALPHA / DIGIT / "-" / "." / "_" / "~" / ucschar ucschar = %xA0-D7FF / %xF900-FDCF / %xFDF0-FFEF / %x10000-1FFFD / %x20000-2FFFD / %x30000-3FFFD / %x40000-4FFFD / %x50000-5FFFD / %x60000-6FFFD / %x70000-7FFFD / %x80000-8FFFD / %x90000-9FFFD / %xA0000-AFFFD / %xB0000-BFFFD / %xC0000-CFFFD / %xD0000-DFFFD / %xE1000-EFFFD iprivate = %xE000-F8FF / %xF0000-FFFFD / %x100000-10FFFD Some productions are ambiguous. The "first-match-wins" (a.k.a. "greedy") algorithm applies. For details, see[RFCYYYY]. The following are the same as in [RFCYYYY]:[RFC3986]. Duerst & SuignardExpires May 31, 2005Standards Track [Page9] Internet-Draft8] RFC 3987 Internationalized Resource IdentifiersNovember 2004January 2005 The following rules are the same as those in [RFC3986]: scheme = ALPHA *( ALPHA / DIGIT / "+" / "-" / "." ) port = *DIGIT IP-literal = "[" ( IPv6address / IPvFuture ) "]" IPvFuture = "v" 1*HEXDIG "." 1*( unreserved / sub-delims / ":" ) IPv6address = 6( h16 ":" ) ls32 / "::" 5( h16 ":" ) ls32 / [ h16 ] "::" 4( h16 ":" ) ls32 / [ *1( h16 ":" ) h16 ] "::" 3( h16 ":" ) ls32 / [ *2( h16 ":" ) h16 ] "::" 2( h16 ":" ) ls32 / [ *3( h16 ":" ) h16 ] "::" h16 ":" ls32 / [ *4( h16 ":" ) h16 ] "::" ls32 / [ *5( h16 ":" ) h16 ] "::" h16 / [ *6( h16 ":" ) h16 ] "::" h16 = 1*4HEXDIG ls32 = ( h16 ":" h16 ) / IPv4address IPv4address = dec-octet "." dec-octet "." dec-octet "." dec-octet dec-octet = DIGIT ; 0-9 / %x31-39 DIGIT ; 10-99 / "1" 2DIGIT ; 100-199 / "2" %x30-34 DIGIT ; 200-249 / "25" %x30-35 ; 250-255 pct-encoded = "%" HEXDIG HEXDIG unreserved = ALPHA / DIGIT / "-" / "." / "_" / "~" reserved = gen-delims / sub-delims gen-delims = ":" / "/" / "?" / "#" / "[" / "]" / "@" sub-delims = "!" / "$" / "&" / "'" / "(" / ")" / "*" / "+" / "," / ";" / "=" This syntax does not support IPv6 scoped addressing zone identifiers. Duerst & Suignard Standards Track [Page 9] RFC 3987 Internationalized Resource Identifiers January 2005 3. Relationship between IRIs and URIs IRIs are meant to replace URIs in identifying resources for protocols,formatsformats, and software componentswhichthat use a UCS-based character repertoire. These protocols and components may never need to use URIs directly, especially when the resource identifier is used simply for identification purposes. However, when the resourceDuerst & Suignard Expires May 31, 2005 [Page 10] Internet-Draft Internationalized Resource Identifiers November 2004identifier is used for resource retrieval, it is in many cases necessary to determine the associatedURIURI, because currently most retrieval mechanismscurrently onlyare only defined for URIs. In this case, IRIs can serve as presentation elements for URI protocol elements. An example would be an address bar in a Web user agent. (Additional rationale is given inSectionsection 3.1.)3.13.1. Mapping of IRIs to URIs This section defines how to map an IRI to a URI. Everything in this sectionappliesalso applies to IRI references and URI references, as well as to components thereof (forexampleexample, fragment identifiers). This mapping has two purposes:a) Syntactical:Syntaxical. Many URI schemes and components define additional syntactical restrictions not captured inSectionsection 2.2. Scheme-specific restrictions are applied to IRIs by converting IRIs to URIs and checking the URIs against the scheme-specific restrictions.b) Interpretational:Interpretational. URIs identify resources in various ways. IRIs also identify resources. When the IRI is used solely for identification purposes, it is not necessary to map the IRI to a URI (seeSectionsection 5). However, when an IRI is used for resource retrieval, the resource that the IRI locates is the same as the one located by the URI obtained after converting the IRI according to the procedure defined here. This means that there is no need to define resolution separately on the IRI level. Applications MUST map IRIs to URIs by using the following two steps. Step1) This step generates1. Generate a UCS character sequence from the original IRI format. This step has the following three variants, depending on the form of theinput. Variant A)input: a. If the IRI is written onpaper orpaper, readout loud,aloud, or otherwise represented as a sequence of characters independent of any characterencoding: Representencoding, represent the IRI as a sequence of characters from the UCS normalized according to Normalization Form C (NFC, [UTR15]).Variant B)Duerst & Suignard Standards Track [Page 10] RFC 3987 Internationalized Resource Identifiers January 2005 b. If the IRI is in some digital representation(e.g.(e.g., an octet stream) in some known non-Unicode characterencoding: Convertencoding, convert the IRI to a sequence of characters from the UCS normalized according to NFC.Duerst & Suignard Expires May 31, 2005 [Page 11] Internet-Draft Internationalized Resource Identifiers November 2004 Variant C)c. If the IRI is inana Unicode-based character encoding (forexampleexample, UTF-8 orUTF-16): DoUTF-16), do not normalize (seeSectionsection 5.3.2.2 for details). ApplyStepstep 2 directly to the encoded Unicode character sequence. Step2)2. For each character in 'ucschar' or 'iprivate', applyStepssteps 2.1 through 2.3 below.2.1)2.1. Convert the character to a sequence of one or more octets using UTF-8 [RFC3629].2.2)2.2. Convert each octet to %HH, where HH is the hexadecimal notation of the octet value. Note that this is identical to the percent-encoding mechanism inSectionsection 2.1 of[RFCYYYY].[RFC3986]. To reduce variability, the hexadecimal notation SHOULD useupper caseuppercase letters.2.3)2.3. Replace the original character with the resulting character sequence (i.e., a sequence of %HH triplets). The above mapping from IRIs to URIs produces URIs fully conforming to[RFCYYYY].[RFC3986]. The mapping is also an identity transformation for URIs and isidempotent --idempotent; applying the mapping a second time will not change anything. Every URI is by definition an IRI.InfrastructureSystems accepting IRIs MAY convert the ireg-name component of an IRI as follows (beforeStepstep 2 above) for schemesthat areknown to use domain names in ireg-name,but whereif the scheme definition does not allow percent-encoding for ireg-name: Replace the ireg-name part of the IRI by the part converted using the ToASCII operation specified inSectionsection 4.1 of [RFC3490] on each dot-separated label, and by using U+002E (FULL STOP) as a label separator, with the flag UseSTD3ASCIIRules set toTRUETRUE, and with the flag AllowUnassigned set to FALSE for creating IRIs and set to TRUE otherwise.The ToASCII operation mayDuerst & Suignard Standards Track [Page 11] RFC 3987 Internationalized Resource Identifiers January 2005 The ToASCII operation may fail, but this would mean that the IRI cannot be resolved. This conversion SHOULD be used when the goal is to maximize interoperability with legacy URI resolvers. For example, the IRIhttp://résumé.example.org"http://résumé.example.org" may be converted tohttp://xn--rsum-bpad.example.org"http://xn--rsum-bpad.example.org" instead ofhttp://r%C3%A9sum%C3%A9.example.org."http://r%C3%A9sum%C3%A9.example.org". An IRI with a scheme that is known to use domain names in ireg-name, but where the scheme definition does not allow percent-encoding for ireg-name, meets scheme-specific restrictions if either the straightforward conversion or the conversion using the ToASCII operation on ireg-name result in an URI that meets thescheme-specificscheme- specific restrictions. Such an IRI resolves to the URIDuerst & Suignard Expires May 31, 2005 [Page 12] Internet-Draft Internationalized Resource Identifiers November 2004obtained after converting the IRIincluding usingand uses the ToASCII operation on ireg-name. Implementations do notneedhave to do this conversion as long as they produce the same result. Note: The difference betweenVariants Bvariants b andCc inStepstep 1(Variant B using(using normalization withNFC while Variant CNFC, versus not using any normalization)is to accountaccounts for the fact that in many non-Unicode character encodings, some text cannot be represented directly. For example,Vietnamthe word "Vietnam" is natively written "Việt Nam" (containing a LATIN SMALL LETTER E WITH CIRCUMFLEX AND DOT BELOW) in NFC, but a direct transcoding from the windows-1258 character encoding leads to "Việt Nam" (containing a LATIN SMALL LETTER E WITH CIRCUMFLEX followed by a COMBINING DOTBELOW), whereas directBELOW). Direct transcoding of other 8-bit encodings of Vietnamese may lead to other representations. Note: The uniform treatment of the whole IRI inStepstep 2aboveis important tonotmake processingdependent onindependent of URI scheme. See [Gettys] for an in-depth discussion. Note: In practice, whether thedifference abovegeneral mapping (steps 1 and 2) or the ToASCII operation of [RFC3490] is used for ireg-name will not be noticed if mapping from IRI to URI and resolution is tightly integrated(e.g.(e.g., carried out in the same user agent). But Duerst & Suignard Standards Track [Page 12] RFC 3987 Internationalized Resource Identifiers January 2005 conversion using [RFC3490] may be able to better deal with backwards compatibility issues in case mapping and resolution are separated, as in the case of using an HTTP proxy. Note: Internationalized Domain Names may be contained in parts of an IRI other than the ireg-name part. It is the responsibility of scheme-specific implementations (if the Internationalized Domain Name is part of the scheme syntax) or of server-side implementations (if the Internationalized Domain Name is part of 'iquery') to apply the necessary conversions at the appropriate point. Example: Trying to validate the Web page at http://résumé.example.org would lead to an IRI of http://validator.w3.org/check?uri=http%3A%2F%2Frésumé. example.org, which would convert to a URI of http://validator.w3.org/check?uri=http%3A%2F%2Fr%C3%A9sum%C3%A9. example.org. The server side implementation would be responsibleto dofor making the necessary conversionsin orderto be able to retrieve the Web page.InfrastructureSystems accepting IRIs MAY also deal with the printable characters in US-ASCII that are not allowed in URIs, namely "<", ">", '"',Space,space, "{", "}", "|", "\", "^", and "`", inStepstep 2 above. Ifsuchthese characters are found but are not converted, then the conversion SHOULD fail. Please note that the number sign ("#"), the percent sign ("%"), and the square bracket characters ("[", "]") are not partDuerst & Suignard Expires May 31, 2005 [Page 13] Internet-Draft Internationalized Resource Identifiers November 2004of the abovelist,list and MUST NOT be converted. Protocols and formats that have used earlier definitions of IRIs including these characters MAY require percent-encoding of these characters as a preprocessing step to extract the actual IRI from a given field.SuchThis preprocessing MAY also be used by applications allowing the user to enter an IRI. Note: In this process (inStepstep 2.3), characters allowed in URI referencesas well asand existing percent-encoded sequences are not encoded further. (This mapping is similar to, but different from, the encoding applied whenincludingarbitrary contentintois included in some part of a URI.) For example, an IRI ofhttp://www.example.org/red%09rosé#red"http://www.example.org/red%09rosé#red" (in XML notation) is converted tohttp://www.example.org/red%09ros%C3%A9#red,"http://www.example.org/red%09ros%C3%A9#red", not to something likehttp%3A%2F%2Fwww.example.org%2Fred%2509ros%C3%A9%23red."http%3A%2F%2Fwww.example.org%2Fred%2509ros%C3%A9%23red". Note: Some older software transcoding to UTF-8 may produce illegal output for some input, in particular for characters outside the BMP (Basic Multilingual Plane). As an example, for thefollowingIRI with non-BMP characters (in XML Notation):http://example.com/𐌀𐌁𐌂 (the"http://example.com/𐌀𐌁𐌂"; Duerst & Suignard Standards Track [Page 13] RFC 3987 Internationalized Resource Identifiers January 2005 which contains the first three letters of the Old Italicalphabet)alphabet, the correct conversion to a URIis: http://example.com/%F0%90%8C%80%F0%90%8C%81%F0%90%8C%82 3.2is "http://example.com/%F0%90%8C%80%F0%90%8C%81%F0%90%8C%82" 3.2. Converting URIs to IRIs In some situations,it may be desirable to try to convertconverting a URI into an equivalentIRI.IRI may be desirable. This section gives a procedureto do such afor this conversion. The conversion described in this section will always result in an IRIwhichthat maps back to the URIthat wasused as an input for the conversion (except for potential case differences in percent-encoding and for potential percent-encoded unreserved characters). However, the IRI resulting from this conversion may not be exactly the same as the original IRI (if there ever was one).URI to IRIURI-to-IRI conversion removes percent-encodings, but not all percent-encodings can be eliminated. There are several reasons for this:a)1. Some percent-encodings are necessary to distinguishpercent-encodedpercent- encoded and unencoded uses of reserved characters.b)2. Some percent-encodings cannot be interpreted as sequences of UTF-8 octets.Duerst & Suignard Expires May 31, 2005 [Page 14] Internet-Draft Internationalized Resource Identifiers November 2004(Note: The octet patterns of UTF-8 are highly regular. Therefore, there is a very high probability, but no guarantee, that percent-encodings that can be interpreted as sequences of UTF-8 octets actually originated from UTF-8. For a detailed discussion, see [Duerst97].)c)3. The conversion may result in a character that is not appropriate in an IRI. SeeSectionsections 2.2,Section4.1, andSection6.1 for further details. Conversion from a URI to an IRI is done by using the following steps (or any other algorithm that produces the same result):1)1. Represent the URI as a sequence of octets in US-ASCII.2)2. Convert all percent-encodings(%("%" followed by two hexadecimal digits) to the corresponding octets, except those corresponding to'%',"%", characters in'reserved',"reserved", and characters in US-ASCII not allowed inURIs, to the corresponding octets. 3)URIs. 3. Re-percent-encode any octet produced inStepstep 2 that is not part of a strictly legal UTF-8 octet sequence.4)Duerst & Suignard Standards Track [Page 14] RFC 3987 Internationalized Resource Identifiers January 2005 4. Re-percent-encode all octets produced inStepstep 3 that in UTF-8 represent characters that are not appropriate according toSectionsections 2.2,Section4.1, andSection6.1.5)5. Interpret the resulting octet sequence as a sequence of characters encoded in UTF-8. This procedure will convert as many percent-encoded characters as possible to characters in an IRI. Because there are some choices whenapplying Stepstep 4 is applied (seeSectionsection 6.1), results may vary. Conversions from URIs to IRIs MUST NOT use anyothercharacter encoding other than UTF-8 inStepssteps 3 and4 above,4, even if it might be possiblefrom contextto guess from the context that another character encoding than UTF-8 was used in the URI.As anFor example, the URIhttp://www.example.org/r%E9sum%E9.html"http://www.example.org/r%E9sum%E9.html" might with some guessing be interpreted to contain two e-acute characters encoded as iso-8859-1. It must not be converted to an IRI containing these e-acute characters. Otherwise,the IRI willin the future the IRI will be mapped tohttp://www.example.org/r%C3%A9sum%C3%A9.html,"http://www.example.org/r%C3%A9sum%C3%A9.html", which is a different URIthan http://www.example.org/r%E9sum%E9.html. 3.2.1from "http://www.example.org/r%E9sum%E9.html". 3.2.1. Examples This section shows various examples of converting URIs to IRIs. EachDuerst & Suignard Expires May 31, 2005 [Page 15] Internet-Draft Internationalized Resource Identifiers November 2004example shows the result afterapplyingeach of theStepssteps 1to 5.through 5 is applied. XML Notation is used for the final result. Octets are denoted by "<" followed by two hexadecimal digits followed by ">". The following example contains the sequence'%C3%BC',"%C3%BC", which is a strictly legal UTF-8 sequence, and which is converted into the actual characterU+00FCU+00FC, LATIN SMALL LETTER U WITH DIAERESIS (also known as u-umlaut).1)1. http://www.example.org/D%C3%BCrst2)2. http://www.example.org/D<c3><bc>rst3)3. http://www.example.org/D<c3><bc>rst4)4. http://www.example.org/D<c3><bc>rst5)5. http://www.example.org/Dürst The following example contains the sequence'%FC',"%FC", which might representU+00FCU+00FC, LATIN SMALL LETTER U WITHDIAERESISDIAERESIS, in the iso-8859-1 character encoding. (It might represent other characters in other character encodings. For example, the octet <fc> in Duerst & Suignard Standards Track [Page 15] RFC 3987 Internationalized Resource Identifiers January 2005 iso-8859-5 representsU+045CU+045C, CYRILLIC SMALL LETTER KJE.) Because <fc> is not part of a strictly legal UTF-8 sequence, it is re-percent-encoded inStepstep 3.1)1. http://www.example.org/D%FCrst2)2. http://www.example.org/D<fc>rst3)3. http://www.example.org/D%FCrst4)4. http://www.example.org/D%FCrst5)5. http://www.example.org/D%FCrst The following example contains'%e2%80%ae',"%e2%80%ae", which is thepercent-encodedpercent- encoded UTF-8 character encoding of U+202E, RIGHT-TO-LEFT OVERRIDE. Section 4.1 forbids the direct use of this character in an IRI. Therefore, the corresponding octets are re-percent-encoded inStepstep 4. This example shows that the case(upper(upper- orlower)lowercase) of letters used inpercent-encodespercent-encodings may not be preserved. The example also contains a punycode-encoded domain name label (xn--99zt52a), which is not converted.Duerst & Suignard Expires May 31, 2005 [Page 16] Internet-Draft Internationalized Resource Identifiers November 2004 1)1. http://xn--99zt52a.example.org/%e2%80%ae2)2. http://xn--99zt52a.example.org/<e2><80><ae>3)3. http://xn--99zt52a.example.org/<e2><80><ae>4)4. http://xn--99zt52a.example.org/%E2%80%AE5)5. http://xn--99zt52a.example.org/%E2%80%AE Implementations with scheme-specific knowledge MAY convert punycode-encoded domain name labels to the corresponding characters by using the ToUnicode procedure. Thus, for the example above, the labelxn--99zt52a"xn--99zt52a" may be converted to U+7D0D U+8C46 (Japanese Natto), leading to the overall IRI ofhttp://納豆.example.org/%E2%80%AE"http://納豆.example.org/%E2%80%AE". 4. Bidirectional IRIs forRight-to-leftRight-to-Left Languages Some UCS characters, such as those used in the Arabic and Hebrewscript,scripts, have an inherent right-to-left (rtl) writing direction. IRIs containingsuchthese characters (called bidirectional IRIs or Bidi IRIs) require additional attention because of the non-trivial Duerst & Suignard Standards Track [Page 16] RFC 3987 Internationalized Resource Identifiers January 2005 relation between logical representation (used for digital representationas well as whenand for reading/spelling) and visual representation (used for display/printing). Because of the complex interaction between the logical representation, the visual representation, and the syntax of a Bidi IRI, a balance is needed between various requirements. The main requirementsare: 1)are 1. user-predictable conversion between visual and logical representation;2)2. the ability to include a wide range of characters in various parts of the IRI;3)and 3. minor or no changes or restrictions for implementations.4.14.1. Logical Storage and Visual Presentation When stored or transmitted in digital representation, bidirectional IRIs MUST be in full logicalorder,order and MUST conform to the IRI syntax rules (which includes the rules relevant to their scheme). Thisassuresensures that bidirectional IRIs can be processed in the same way as other IRIs.Duerst & Suignard Expires May 31, 2005 [Page 17] Internet-Draft Internationalized Resource Identifiers November 2004 When rendered, bidirectionalBidirectional IRIs MUST be rendered by using the Unicode Bidirectional Algorithm [UNIV4], [UNI9]. Bidirectional IRIs MUST be rendered in the same way as they would berenderedif they were inana left-to-rightembedding, i.e.embedding; i.e., as if they were preceded by U+202A, LEFT-TO-RIGHT EMBEDDING (LRE), and followed by U+202C, POP DIRECTIONAL FORMATTING (PDF). Setting the embedding direction can also be done in a higher-level protocol(e.g.(e.g., the dir='ltr' attribute in HTML). There is no requirement toactuallyuse the above embedding if the display is still the same without the embedding. For example, a bidirectional IRI in a text with left-to-right base directionality (such as used for English or Cyrillic) that is preceded and followed by whitespace and strong left-to-right characters does not need an embedding. Also, a bidirectional relative IRI reference that only contains strong right-to-left characters and weak characters and that starts and ends with a strongrigth-to-leftright-to-left character and appears in a text with right-to-left base directionality (such as used for Arabic or Hebrew) and is preceded and followed by whitespace and strong characters does not need an embedding. Duerst & Suignard Standards Track [Page 17] RFC 3987 Internationalized Resource Identifiers January 2005 In some other cases, using U+200E, LEFT-TO-RIGHT MARK(LRM)(LRM), may be sufficient to force the correct display behavior. However, the details of the Unicode Bidirectional algorithm are not always easy to understand. Implementers are strongly advised to err on the side of caution and to use embedding in all cases where they are not completely sure that the display behavior is unaffected without the embedding. The Unicode Bidirectional Algorithm ([UNI9],Sectionsection 4.3) permits higher-level protocols to influence bidirectional rendering. Such changes by higher-level protocols MUST NOT be used if they change the rendering of IRIs. The bidirectional formatting characters that may be used before or after the IRI toassureensure correct display arethemselvesnot themselves part of the IRI. IRIs MUST NOT contain bidirectional formatting characters (LRM, RLM, LRE, RLE, LRO, RLO, and PDF). They affect the visual rendering of theIRI,IRI but do notthemselvesappearvisually.themselves. It would therefore not be possible tocorrectlyinput an IRI with suchcharacters. 4.2characters correctly. 4.2. Bidi IRI Structure The Unicode Bidirectional Algorithm is designed mainly for running text. To make sure that it does not affect the rendering of bidirectional IRIs too much, some restrictions on bidirectional IRIs are necessary. These restrictions are given in terms of delimitersDuerst & Suignard Expires May 31, 2005 [Page 18] Internet-Draft Internationalized Resource Identifiers November 2004(structural characters, mostly punctuation such as'@', '.', ':', '/')"@", ".", ":", and "/") and components (usually consisting mostly of letters and digits). The following syntax rules fromSectionsection 2.2 correspond to components for the purpose of Bidi behavior: iuserinfo, ireg-name, isegment, isegment-nz, isegment-nz-nc, ireg-name, iquery, and ifragment. Specifications that define the syntax of any of the above components MAY divide them further and define smaller parts to be components according to this document. As an example, the restrictions of [RFC3490] on bidirectional domain names correspond to treating each label of a domain name as a component forthoseschemeswherewith ireg-nameisas a domain name. Even where the components are not defined formally, it may be helpful to think about some syntax in terms of components and to apply the relevant restrictions. For example, for the usual name/value syntax in query parts, it is convenient to treat each name and each value as a component. As another example, the extensions in a resource name can be treated as separate components. Duerst & Suignard Standards Track [Page 18] RFC 3987 Internationalized Resource Identifiers January 2005 For each component, the following restrictions apply:1)1. A component SHOULD NOT use both right-to-left and left-to-right characters.2)2. A component using right-to-left characters SHOULD start and end with right-to-left characters. The above restrictions are given as shoulds, rather than as musts. For IRIs that are never presented visually, they are not relevant. However, for IRIs in general, they are very important toinsureensure consistent conversion between visual presentation and logical representation, in both directions. Note: In some components, the above restrictions may actually be strictly enforced. For example, [RFC3490] requires that these restrictions apply to the labels of a host name for those schemes where ireg-name is a host name. In some othercomponents, for examplecomponents (for example, pathcomponents,components) following these restrictions may not be too difficult. For other components, such as parts of the query part, it may be very difficult to enforce therestrictions,restrictions because the values of query parameters may be arbitrary character sequences. If the above restrictions cannot be satisfied otherwise, the affected component can always be mapped to URI notation as described inSectionsection 3.1. Please note that the whole componentneedshas to be mappedDuerst & Suignard Expires May 31, 2005 [Page 19] Internet-Draft Internationalized Resource Identifiers November 2004(see also Example 9 below).4.34.3. Input of Bidi IRIs Bidi input methods MUST generate Bidi IRIs in logical order while rendering them according toSectionsection 4.1. During input, rendering SHOULD be updated after every new characterthatis input to avoidendend- user confusion.4.44.4. Examples This section gives examples of bidirectional IRIs, in Bidi Notation. It shows legal IRIs with the relationship between logical and visualrepresentation,representation and explains how certain phenomena in this relationship may look strange to somebody not familiar with bidirectional behavior, but familiar to users of Arabic and Hebrew. It also shows what happens if the restrictions given inSectionsection 4.2 are not followed. The examples below can be seen at [BidiEx], in Arabic, Hebrew, and Bidi Notation variants. Duerst & Suignard Standards Track [Page 19] RFC 3987 Internationalized Resource Identifiers January 2005 To read the bidi text in the examples, read the visual representation from left to right until you encounter a block of rtl text. Read the rtl block (including slashes and other special characters) from right to left, then continue at the next unread ltr character. Example 1: A single component with rtl characters is inverted:logicalLogical representation:http://ab.CDEFGH.ij/kl/mn/op.html visual"http://ab.CDEFGH.ij/kl/mn/op.html" Visual representation:http://ab.HGFEDC.ij/kl/mn/op.html"http://ab.HGFEDC.ij/kl/mn/op.html" Components can be readone-by-one,one by one, and each component can be read in its natural direction. Example 2: More than one consecutive component with rtl characters is inverted as a whole:logicalLogical representation:http://ab.CDE.FGH/ij/kl/mn/op.html visual"http://ab.CDE.FGH/ij/kl/mn/op.html" Visual representation:http://ab.HGF.EDC/ij/kl/mn/op.html"http://ab.HGF.EDC/ij/kl/mn/op.html" A sequence of rtl components is read rtl, in the same way as a sequence of rtl words is read rtl in a bidi text. Example 3: All components of an IRI (except for the scheme) are rtl. All rtl components are inverted overall:logicalLogical representation:http://AB.CD.EF/GH/IJ/KL?MN=OP;QR=ST#UV visual"http://AB.CD.EF/GH/IJ/KL?MN=OP;QR=ST#UV" Visual representation:http://VU#TS=RQ;PO=NM?LK/JI/HG/FE.DC.BA"http://VU#TS=RQ;PO=NM?LK/JI/HG/FE.DC.BA" The whole IRI (except the scheme) is read rtl. Delimiters between rtl components stay between the respective components; delimiters between ltr and rtl components don't move. Example 4:SeveralEach of several sequences of rtl componentsare eachis inverted ontheirits own:Duerst & Suignard Expires May 31, 2005 [Page 20] Internet-Draft Internationalized Resource Identifiers November 2004 logicalLogical representation:http://AB.CD.ef/gh/IJ/KL.html visual"http://AB.CD.ef/gh/IJ/KL.html" Visual representation:http://DC.BA.ef/gh/LK/JI.html"http://DC.BA.ef/gh/LK/JI.html" Each sequence of rtl components is read rtl, in the same way as each sequence of rtl words in an ltr text is read rtl. Example 5: Example 2, applied to components of different kinds:logicalLogical representation:http://ab.cd.EF/GH/ij/kl.html visual"http://ab.cd.EF/GH/ij/kl.html" Visual representation:http://ab.cd.HG/FE/ij/kl.html"http://ab.cd.HG/FE/ij/kl.html" The inversion of the domain name label and the path component may be unexpected, but it is consistent with other bidi behavior. For reassurance that the domain component really is "ab.cd.EF", it may be helpful to read aloud the visual representation following the bidi algorithm. After "http://ab.cd." one reads the RTL block "E-F-slash-G-H", which corresponds to the logical representation. Example 6: Same asexampleExample 5, with more rtl components:logicalLogical representation:http://ab.CD.EF/GH/IJ/kl.html visual"http://ab.CD.EF/GH/IJ/kl.html" Visual representation:http://ab.JI/HG/FE.DC/kl.html"http://ab.JI/HG/FE.DC/kl.html" The inversion of the domain name labels and the path components may be easier to identify because the delimiters also move. Duerst & Suignard Standards Track [Page 20] RFC 3987 Internationalized Resource Identifiers January 2005 Example 7: A single rtl componentwith includedincludes digits:logicalLogical representation:http://ab.CDE123FGH.ij/kl/mn/op.html visual"http://ab.CDE123FGH.ij/kl/mn/op.html" Visual representation:http://ab.HGF123EDC.ij/kl/mn/op.html"http://ab.HGF123EDC.ij/kl/mn/op.html" Numbers are written ltr in allcases,cases but are treated as an additional embedding inside a run of rtl characters. This is completely consistent with usual bidirectional text. Example 8 (not allowed): Numbers are at the start or end ofaan rtl component:logicalLogical representation:http://ab.cd.ef/GH1/2IJ/KL.html visual"http://ab.cd.ef/GH1/2IJ/KL.html" Visual representation:http://ab.cd.ef/LK/JI1/2HG.html"http://ab.cd.ef/LK/JI1/2HG.html" The sequence'1/2'"1/2" is interpreted by the bidi algorithm as a fraction, fragmenting the components and leading to confusion. There are other characters that are interpreted in a special way close tonumbers,numbers; inparticular '+', '-', '#', '$', '%', ',', '.',particular, "+", "-", "#", "$", "%", ",", ".", and':'.":". Example 9 (not allowed): The numbers in the previous example are percent-encoded:logicalLogical representation:http://ab.cd.ef/GH%31/%32IJ/KL.html, visual"http://ab.cd.ef/GH%31/%32IJ/KL.html", Visual representation (Hebrew):http://ab.cd.ef/%31HG/LK/JI%32.html visual"http://ab.cd.ef/%31HG/LK/JI%32.html" Visual representation (Arabic):http://ab.cd.ef/31%HG/%LK/JI32.html"http://ab.cd.ef/31%HG/%LK/JI32.html" Depending on whether theupper-caseuppercase letters represent Arabic or Hebrew, the visual representation is different. Example 10(allowed,(allowed but not recommended):logicalLogical representation:http://ab.CDEFGH.123/kl/mn/op.html visual"http://ab.CDEFGH.123/kl/mn/op.html" Visual representation:http://ab.123.HGFEDC/kl/mn/op.html Duerst & Suignard Expires May 31, 2005 [Page 21] Internet-Draft Internationalized Resource Identifiers November 2004"http://ab.123.HGFEDC/kl/mn/op.html" Components consisting of only numbers are allowed (it would be rather difficult to prohibit them), but these may interact with adjacent RTL components in ways that are not easy to predict. 5. Normalization and Comparison Note: The structure and much of the material for this section is taken from section 6 of[RFCYYYY];[RFC3986]; the differences are due to the specifics of IRIs. One of the most common operations on IRIs is simple comparison:determining ifDetermining whether two IRIs are equivalent without using the IRIs or the mapped URIs to access their respective resource(s). A comparison is performedevery timewhenever a response cache is accessed, a browser checks its history to color a link, or an XML parser processes tags within a namespace. Extensive normalization prior to comparison of IRIs may be used by spiders and indexing engines to prune a search space or reduce duplication of request actions and response storage. Duerst & Suignard Standards Track [Page 21] RFC 3987 Internationalized Resource Identifiers January 2005 IRI comparison is performedin respect tofor some particularpurpose, andpurpose. Protocols or implementationswith differingthat compare IRIs for different purposes will often be subject to differing design trade-offs in regards to how much effort should be spent in reducing aliased identifiers. This section describesa variety ofvarious methods that may be used to compare IRIs, the trade-offs between them, and the types of applications that might use them.5.15.1. EquivalenceSinceBecause IRIs exist to identify resources, presumably they should be considered equivalent when they identify the same resource. However,such athis definition of equivalence is not of much practical use,sinceas there is no way for an implementation to compare two resourcesthat are not under its own control.unless it has full knowledge or control of them. For this reason, determination of equivalence or difference of IRIs is based on string comparison, perhaps augmented by reference to additional rules provided by URI scheme definitions. We use the terms "different" and "equivalent" to describe the possible outcomes of such comparisons, but there are manyapplicationdependentapplication-dependent versions of equivalence. Even though it is possible to determine that two IRIs are equivalent, IRI comparison is not sufficient to determineifwhether two IRIs identify different resources. For example, an owner of two different domain names could decide to serve the same resource from both, resulting in two different IRIs. Therefore, comparison methods are designed to minimize false negatives while strictly avoiding false positives. In testing for equivalence, applications should not directly compare relative references; the references should be converted to theirDuerst & Suignard Expires May 31, 2005 [Page 22] Internet-Draft Internationalized Resource Identifiers November 2004respective target IRIs before comparison. When IRIs arebeingcomparedfor the purpose of selectingto select (oravoiding)avoid) a network action, such as retrieval of a representation, fragment components (if any) should be excluded from the comparison. Applications using IRIs as identity tokens with no relationship to a protocol MUST use the Simple String Comparison (seeSectionsection 5.3.1). All other applications MUST select one of the comparison practices from the Comparison Ladder (seeSection 5.3,section 5.3 or, after IRI-to-URI conversion, select one of the comparison practices from the URI comparison ladder[RFCYYYY], Section 6.2. 5.2in [RFC3986], section 6.2) 5.2. Preparation for Comparison Any kind of IRI comparison REQUIRES that all escapings or encodings in the protocol or format that carries an IRI are resolved. This is usually done whenparsingthe protocol orformat.format is parsed. Examples of such Duerst & Suignard Standards Track [Page 22] RFC 3987 Internationalized Resource Identifiers January 2005 escapings or encodings are entities and numeric character references in [HTML4] and [XML1]. As an example,http://example.org/rosé"http://example.org/rosé" (in HTML),http://example.org/rosé"http://example.org/rosé"; (in HTML or XML), andhttp://example.org/rosé"http://example.org/rosé"; (in HTML or XML) are allgetresolved into what is denoted in this document (seeSectionsection 1.4) ashttp://example.org/rosé"http://example.org/rosé"; (the "é" here standing for the actual e-acute character, to compensate for the fact that this document cannot contain non-ASCII characters). Similar considerations apply to encodings such as Transfer Codings in HTTP (see [RFC2616]) and Content Transfer Encodings inMIME[RFC2045],MIME ([RFC2045]), although in these cases, the encoding isnotbased not oncharacters,characters but on octets, and additional care is required to make sure that characters, and not just arbitrary octets, are compared (seeSectionsection 5.3.1).5.35.3. Comparison LadderAIn practice, a variety of methods areused in practiceused, to test IRI equivalence. These methods fall into arange,range distinguished by the amount of processing required and the degree to which the probability of false negatives is reduced. As noted above, false negatives cannot be eliminated. In practice, their probability can be reduced, but this reduction requires more processing and is not cost-effective for all applications. If this range of comparison practices is considered as a ladder, the following discussion will climb the ladder, starting withthosepractices that are cheap but have a relatively higher chance of producing false negatives, and proceeding to those that have higher computational cost and lower risk of false negatives.Duerst & Suignard Expires May 31, 2005 [Page 23] Internet-Draft Internationalized Resource Identifiers November 2004 5.3.15.3.1. Simple String Comparison If two IRIs, when considered as character strings, are identical, then it is safe to conclude that they are equivalent. This type of equivalence test has very low computational cost and is in wide use in a variety of applications, particularly in the domain ofparsing andparsing. It is also used when a definitive answer to the question of IRI equivalence is needed that is independent of the scheme used and that can be calculated quickly and without accessing a network. An example of such a case is XML Namespaces ([XMLNamespace]). Testing strings for equivalence requires some basic precautions. This procedure is often referred to as "bit-for-bit" or "byte-for-byte" comparison, which is potentially misleading. Testingofstrings for equality is normally based onpairwisepair comparison of the characters that Duerst & Suignard Standards Track [Page 23] RFC 3987 Internationalized Resource Identifiers January 2005 make up the strings, starting from the first and proceeding until both strings are exhausted and all characters are found to be equal, until a pair of characters compares unequal, or until one of the strings is exhausted before the other.SuchThis charactercomparisons requirecomparison requires that each pair of characters be put in comparable encoding form. For example, should one IRI be stored in a byte array in UTF-8 encodingform,form and the secondbein a UTF-16 encoding form, bit-for-bit comparisons applied naively will produce errors. It is better to speak of equality on a character-for-character rather than on a byte-for-byte or bit-for-bit basis. In practical terms, character-by-character comparisons should be donecodepoint-by-codepointcodepoint by codepoint after conversion to a common character encoding form. When comparingcharacter-by-character,character by character, the comparison function MUST NOT map IRIs to URIs, because such a mapping would create additional spurious equivalences. It follows thatIRIs SHOULDan IRI SHOULD NOT be modified when being transported if there is any chance that this IRI might be used as an identifier. False negatives are caused by the production and use of IRI aliases. Unnecessary aliases can be reduced, regardless of the comparison method, by consistently providing IRI references in analready-normalizedalready normalized form (i.e., a form identical to what would be produced after normalization is applied, as described below). Protocols and data formats oftenchoose tolimit some IRI comparisons to simple string comparison, based on the theory that people and implementations will, in their own best interest, be consistent in providing IRI references, or at least be consistent enough to negate any efficiency that might be obtained from further normalization.Duerst & Suignard Expires May 31, 2005 [Page 24] Internet-Draft Internationalized Resource Identifiers November 2004 5.3.2 Syntax-based5.3.2. Syntax-Based Normalization Implementations may use logic based on the definitions provided by this specification to reduce the probability of false negatives.SuchThis processing is moderately higher in cost than character-for-character string comparison. For example, an application using this approach could reasonably consider the following two IRIs equivalent: example://a/b/c/%7Bfoo%7D/rosé eXAMPLE://a/./b/../b/%63/%7bfoo%7d/ros%C3%A9 Web user agents, such as browsers, typically apply this type of IRI normalization when determining whether a cached response is available. Syntax-based normalization includes such techniques as case normalization, character normalization, percent-encoding normalization, and removal of dot-segments.5.3.2.1Duerst & Suignard Standards Track [Page 24] RFC 3987 Internationalized Resource Identifiers January 2005 5.3.2.1. Case Normalization For all IRIs, the hexadecimal digits within a percent-encoding triplet (e.g., "%3a" versus "%3A") are case-insensitive and therefore should be normalized to use uppercase letters for the digitsA-F.A - F. When an IRI uses components of the generic syntax, the component syntax equivalence rules always apply; namely, that the scheme and US-ASCII only host arecase-insensitivecase insensitive and therefore should be normalized to lowercase. For example, the URI<HTTP://www.EXAMPLE.com/>"HTTP://www.EXAMPLE.com/" is equivalent to<http://www.example.com/>."http://www.example.com/". Case equivalence for non-ASCII characters in IRI components that are IDNs are discussed inSectionsection 5.3.3. The other generic syntax components are assumed to becase-sensitivecase sensitive unless specifically defined otherwise by the scheme. Creating schemes that allow case-insensitive syntax components containingnon US-ASCIInon-ASCII characters should beavoided because such a caseavoided. Case normalizationmayof non-ASCII characters can becultural dependantculturally dependent and is always a complex operation. The only exception concerns non-ASCII host names for which the character normalization includes a mapping step derived from case folding.5.3.2.25.3.2.2. Character Normalization The Unicode Standard [UNIV4] defines various equivalences between sequences of characters for various purposes. Unicode Standard Annex #15 [UTR15] defines various Normalization Forms for these equivalences, in particular Normalization Form C (NFC, Canonical Decomposition, followed by Canonical Composition) and NormalizationDuerst & Suignard Expires May 31, 2005 [Page 25] Internet-Draft Internationalized Resource Identifiers November 2004Form KC (NFKC, Compatibility Decomposition, followed by Canonical Composition). Equivalence of IRIs MUST rely on the assumption that IRIs are appropriatelypre-character-normalized,pre-character-normalized rather thanapplyingapply character normalization when comparing two IRIs. The exceptions are conversion from a non-digital form, and conversion from a non-UCS-based character encoding toana UCS-based character encoding. In these cases, NFC or a normalizing transcoder using NFC MUST be used for interoperability. To avoid false negatives and problems with transcoding, IRIs SHOULD be created by using NFC. Using NFKC may avoid even moreproblems,problems; forexampleexample, by choosing half-width Latin letters instead offull-width,full-width ones, and full-widthKatakanainstead ofhalf-width.half-width Katakana. As an example,http://www.example.org/résumé.html"http://www.example.org/résumé.html" (in XML Notation) is in NFC. On the other hand,http://www.example.org/résumé.html"http://www.example.org/résumé.html" is not in NFC. Duerst & Suignard Standards Track [Page 25] RFC 3987 Internationalized Resource Identifiers January 2005 The former uses precombined e-acute characters, and the latter uses'e'"e" characters followed by combining acute accents. Both usages are definedto beas canonically equivalent in [UNIV4]. Note: Because it is unknown how a particular sequence of characters is being treated with respect to character normalization, it would be inappropriate to allow third parties to normalize an IRI arbitrarily. This does not contradict the recommendation that when a resource is created, its IRI should be ascharacter-normalizedcharacter normalized as possible(i.e.(i.e., NFC or even NFKC). This is similar to theupper-case/lower-case problems in character-normalized as possible (i.e. NFC or even NFKC). URIs.uppercase/lowercase problems. Some parts of a URI arecase-insensitivecase insensitive (domain name). For others, it is unclear whether they arecase-sensitive or case-insensitive,case sensitive, case insensitive, or something in between(e.g. case-sensitive,(e.g., case sensitive, but with a multiple choice selection if the wrong case is used,a multiple choice selection is providedinstead of a direct negative result). The best recipe is that the creatorusesuse a reasonablecapitalization, andcapitalization and, when transferring the URI,thatcapitalizationisnever be changed. Various IRI schemes may allow the usage of Internationalized Domain Names (IDN) [RFC3490] either in the ireg-name part or elsewhere. Character Normalization also applies to IDNs, as discussed inSectionsection 5.3.3.5.3.2.35.3.2.3. Percent-Encoding Normalization The percent-encoding mechanism(Section(section 2.1 of[RFCYYYY])[RFC3986]) is a frequent source of variance among otherwise identical IRIs. In addition to the case normalization issue noted above, some IRIDuerst & Suignard Expires May 31, 2005 [Page 26] Internet-Draft Internationalized Resource Identifiers November 2004producers percent-encode octets that do not require percent-encoding, resulting in IRIs that are equivalent to theirnonencodednon encoded counterparts.SuchThese IRIs should be normalized by decoding any percent-encoded octet sequence that corresponds to an unreserved character, as described inSectionsection 2.3 of[RFCYYYY].[RFC3986]. For actual resolution, differences in percent-encoding (except for the percent-encoding of reserved characters) MUST always result in the same resource. For example,http://example.org/~user, http://example.org/%7euser"http://example.org/~user", "http://example.org/%7euser", andhttp://example.org/%7Euser"http://example.org/%7Euser", must resolve to the same resource. If this kind of equivalence is to be tested, the percent-encoding of both IRIs to be compared has to bealigned,aligned; forexampleexample, by converting both IRIs to URIs (seeSectionsection 3.1), eliminating escape differences in the resulting URIs, and making sure that the case of the hexadecimal characters in the percent-encoding is always the same (preferablyupper case).uppercase). If the IRI is to be passed to anotherapplication,Duerst & Suignard Standards Track [Page 26] RFC 3987 Internationalized Resource Identifiers January 2005 application or used further in some other way, its original form MUST bepreserved; thepreserved. The conversion described here should be performed only forthe purpose oflocal comparison.5.3.2.45.3.2.4. Path Segment Normalization The complete path segments "." and ".." are intended only for use within relative references(Section(section 4.1 of[RFCYYYY])[RFC3986]) and are removed as part of the reference resolution process(Section(section 5.2 of[RFCYYYY]).[RFC3986]). However, some implementations may incorrectly assume that reference resolution is not necessary when the reference is already an IRI, and thus fail to remove dot-segments when they occur in non-relative paths. IRI normalizers should remove dot-segments by applying the remove_dot_segments algorithm to the path, as described inSectionsection 5.2.4 of[RFCYYYY]. 5.3.3 Scheme-based[RFC3986]. 5.3.3. Scheme-Based Normalization The syntax and semantics of IRIs vary from scheme to scheme, as described by the defining specification for each scheme. Implementations may use scheme-specific rules, at further processing cost, to reduce the probability of false negatives. For example,sincebecause the "http" scheme makes use of an authority component, has a default port of "80", and defines an empty path to be equivalent to "/", the following four IRIs are equivalent: http://example.com http://example.com/ http://example.com:/ http://example.com:80/Duerst & Suignard Expires May 31, 2005 [Page 27] Internet-Draft Internationalized Resource Identifiers November 2004In general, an IRI that uses the generic syntax for authority with an empty path should be normalized to a path of"/"; likewise,"/". Likewise, an explicit ":port",wherefor which the port is empty or the default for the scheme, is equivalent to one where the port and its ":" delimiter areelided,elided and thus should be removed by scheme-based normalization. For example, the second IRI above is the normal form for the "http" scheme. Another case where normalization varies by scheme is in the handling of an empty authority component or empty host subcomponent. For many scheme specifications, an empty authority or host is considered an error; for others, it is considered equivalent to "localhost" or the end-user's host. When a scheme defines a default for authority and an IRI reference to that default is desired, the reference should be normalized to an empty authority for the sake of uniformity, brevity, Duerst & Suignard Standards Track [Page 27] RFC 3987 Internationalized Resource Identifiers January 2005 and internationalization. If, however, either the userinfo or portsubcomponent issubcomponents are non-empty, then the host should be given explicitly even if it matches the default. Normalization should not remove delimiters when their associated component is empty unless it is licensed to do so by the scheme specification. For example, the IRI "http://example.com/?" cannot be assumed to be equivalent to any of the examples above. Likewise, the presence or absence of delimiters within a userinfo subcomponent is usually significant to its interpretation. The fragment component is not subject to any scheme-based normalization; thus, two IRIs that differ only by the suffix "#" are considered different regardless of the scheme. Some IRI schemes may allow the usage of Internationalized Domain Names (IDN) [RFC3490] either in their ireg-name part or elsewhere. When in use in IRIs, those names SHOULD be validated by using the ToASCII operation defined in [RFC3490], with the flags "UseSTD3ASCIIRules" and "AllowUnassigned". An IRI containing an invalid IDN cannot successfully be resolved. Validated IDN components of IRIs SHOULD be character normalized by using the Nameprep process [RFC3491]; however, for legibility purposes, they SHOULD NOT be converted into ASCII Compatible Encoding (ACE). Scheme-based normalization may also consider IDN components and their conversions to punycode as equivalent. As an example,http://résumé.example.org"http://résumé.example.org" may be considered equivalent tohttp://xn--rsum-bpad.example.org"http://xn--rsum-bpad.example.org". Other scheme-specific normalizations are possible.Duerst & Suignard Expires May 31, 2005 [Page 28] Internet-Draft Internationalized Resource Identifiers November 2004 5.3.4 Protocol-based5.3.4. Protocol-Based NormalizationWeb spiders, for which substantialSubstantial effort to reduce the incidence of false negatives is oftencost-effective, are observed tocost-effective for web spiders. Consequently, they implement even more aggressive techniques in IRI comparison. For example, if they observe that an IRI such as http://example.com/data redirects to an IRI differing only in the trailing slash http://example.com/data/ they will likely regard the two as equivalent in the future. This kind of technique is only appropriate when equivalence is clearly indicated by both the result of accessing the resources and the Duerst & Suignard Standards Track [Page 28] RFC 3987 Internationalized Resource Identifiers January 2005 common conventions of their scheme's dereference algorithm (in this case, use of redirection by HTTP origin servers to avoid problems with relative references). 6. Use of IRIs6.16.1. Limitations on UCS Characters Allowed in IRIs This section discusses limitations on characters and character sequences usable for IRIs beyond those given inSectionsection 2.2 andSectionsection 4.1. The considerations in this section are relevant whencreatingIRIsandare created and whenconverting fromURIs are converted to IRIs.a)a. The repertoire of characters allowed in each IRI component is limited by the definition of that component. For example, the definition of the scheme component does not allow characters beyond US-ASCII. (Note: In accordance with URI practice, generic IRI software cannot and should not check for such limitations.)b)b. The UCS contains many areas of characters for which there are strong visual look-alikes. Because of the likelihood of transcription errors, these also should be avoided. This includes the full-width equivalents of Latin characters, half-width Katakana characters for Japanese, and many others.ThisIt also includes many look-alikes of "space", "delims", and "unwise", characters excluded in [RFC3491]. Additional information is available from [UNIXML]. [UNIXML] is written in the context of running text rather than inthe contextthat of identifiers. Nevertheless, it discusses many of the categories ofDuerst & Suignard Expires May 31, 2005 [Page 29] Internet-Draft Internationalized Resource Identifiers November 2004characters not appropriate for IRIs.6.26.2. Software Interfaces and Protocols Although an IRI is defined as a sequence of characters, software interfaces for URIs typically function on sequences of octets or other kinds of code units. Thus, software interfaces and protocols MUST define which character encoding is used. Intermediate software interfaces between IRI-capable components and URI-only components MUST map the IRIs perSectionsection 3.1, when transferring from IRI-capable to URI-only components.Such aThis mapping SHOULD be applied as late as possible. It SHOULD NOT be applied between components that are known to be able to handle IRIs.6.3Duerst & Suignard Standards Track [Page 29] RFC 3987 Internationalized Resource Identifiers January 2005 6.3. Format of URIs and IRIs in Documents and Protocols Document formats that transport URIs mayneedhave to be upgraded to allow the transport of IRIs. Inthosecases where the document as a whole has a native character encoding, IRIs MUST also be encoded in this characterencoding,encoding and converted accordingly by a parser or interpreter. IRI charactersthat arenot expressible in the native character encoding SHOULD be escaped by using the escaping conventions of the document format if such conventions are available. Alternatively, they MAY be percent-encoded according toSectionsection 3.1. For example, in HTML or XML, numeric character references SHOULD be used. If a document as a whole has a native characterencoding,encoding and that character encoding is not UTF-8, then IRIs MUST NOT be placed into the document in the UTF-8 character encoding. Note: Some formats already accommodate IRIs, although they use different terminology. HTML 4.0 [HTML4] defines the conversion from IRIs to URIs as error-avoiding behavior. XML 1.0 [XML1], XLink [XLink],andXML Schema[XMLSchema][XMLSchema], and specifications based upon them allow IRIs. Also, it is expected that all relevant new W3C formats and protocols will be required to handle IRIs [CharMod].6.46.4. Use of UTF-8 for Encoding Original Characters This section discusses details and gives examples for point c) inSectionsection 1.2.In order toTo be able to use IRIs, the URI corresponding to the IRI in question has to encode original characters into octets by using UTF-8. This can be specified for all URIs of a URIscheme,scheme or can apply to individual URIs for schemes that do not specify how to encode original characters. It can apply to the whole URI, or only to some part. For background information on encoding characters into URIs, see alsoSectionsection 2.5 of[RFCYYYY]. Duerst & Suignard Expires May 31, 2005 [Page 30] Internet-Draft Internationalized Resource Identifiers November 2004[RFC3986]. For new URI schemes, using UTF-8 is recommended in [RFC2718]. Examples where UTF-8 is already used are the URN syntax [RFC2141], IMAP URLs [RFC2192], and POP URLs [RFC2384]. On the other hand, because the HTTP URL scheme does not specify how to encode original characters, only some HTTP URLs can have corresponding but different IRIs. For example, for a document with a URI ofhttp://www.example.org/r%C3%A9sum%C3%A9.html,"http://www.example.org/r%C3%A9sum%C3%A9.html", it is possible to construct a corresponding IRI (in XML notation,see Sectionsee, section 1.4):http://www.example.org/résumé.html (é"http://www.example.org/résumé.html" ("é"; stands for the e-acute character, and%C3%A9"%C3%A9" is the UTF-8 encoded and percent-encoded representation of that character). On the other hand, for a document with a URI ofhttp://www.example.org/r%E9sum%E9.html,Duerst & Suignard Standards Track [Page 30] RFC 3987 Internationalized Resource Identifiers January 2005 "http://www.example.org/r%E9sum%E9.html", the percent-encoding octets cannot be converted to actual characters in an IRI,becauseas the percent-encoding is not based on UTF-8. This means that for most URI schemes, there is no need to upgrade their scheme definition in order for them to work with IRIs. The main case where upgradinga scheme definitionmakes sense is when a scheme definition, or a particular component of a scheme, is strictly limited to the use of US-ASCII characters with no provision to include non-ASCII characters/octets via percent-encoding, or if a scheme definition currently uses highly scheme-specific provisions for the encoding of non-ASCII characters. An example ofsuch a scheme might bethis is the mailto: scheme [RFC2368]. This specification does not upgrade any scheme specifications in anyway,way; this has to be done separately. Also,it should be notednote that there is no such thing as an "IRI scheme"; all IRIs use URI schemes, and all URI schemes can be used with IRIs, even though in some cases only by using URIs directly as IRIs, without any conversion. URI schemes can impose restrictions on the syntax of scheme-specificURIs, ie.URIs; i.e., URIs that areadmissableadmissible under the generic URI syntax[RFCYYYY][RFC3986] may not beadmissableadmissible due to narrower syntactic constraints imposed by a URI scheme specification. URI scheme definitions cannot broaden the syntactic restrictions of the generic URIsyntax, otherwisesyntax; otherwise, it would be possible to generate URIs that satisfied thescheme specificscheme-specific syntactic constraints without satisfying the syntactic constraints of the generic URI syntax. However, additional syntactic constraints imposed by URI scheme specifications are applicable toIRI sinceIRI, as the corresponding URI resulting from the mapping defined inSectionsection 3.1 MUST be a valid URI under the syntactic restrictions of generic URI syntax and any narrower restrictions imposed by the corresponding URI scheme specification.Duerst & Suignard Expires May 31, 2005 [Page 31] Internet-Draft Internationalized Resource Identifiers November 2004The requirement for the use of UTF-8 applies to all parts of a URI (with the potential exception of the ireg-namepart,part; seeSectionsection 3.1). However, it is possible that the capability of IRIs to represent a wide range of characters directly is used just in some parts of the IRI (or IRI reference). The other parts of the IRI may only contain US-ASCII characters, or they may not be based on UTF-8. They may be based on another character encoding, or they may directly encode raw binary data (see also [RFC2397]). For example, it is possible to have a URI reference ofhttp://www.example.org/r%E9sum%E9.xml#r%C3%A9sum%C3%A9,"http://www.example.org/r%E9sum%E9.xml#r%C3%A9sum%C3%A9", where the document name is encoded in iso-8859-1 based on server settings, but where the fragment identifier is encoded in UTF-8 according to Duerst & Suignard Standards Track [Page 31] RFC 3987 Internationalized Resource Identifiers January 2005 [XPointer]. The IRI corresponding to the above URI would be (in XML notation)http://www.example.org/r%E9sum%E9.xml#résumé."http://www.example.org/r%E9sum%E9.xml#résumé";. Similar considerations apply to query parts. The functionality of IRIs(namely(namely, to be able to include non-ASCII characters) can only be used if the query part is encoded in UTF-8.6.56.5. Relative IRI References Processing of relative IRI references against a base is handled straightforwardly; the algorithms of[RFCYYYY][RFC3986] can be applied directly, treating the characters additionally allowed in IRI references in the same wayasthat unreserved characters are in URI references. 7. URI/IRI Processing Guidelines(informative)(Informative) This informative section provides guidelines for supporting IRIs in the same software components and operations that currently process URIs:softwareSoftware interfaces that handle URIs, software that allows users to enter URIs, software that creates or generates URIs, software that displays URIs, formats and protocols that transport URIs, and software that interprets URIs. These may all requiremore or lessmodification before functioning properly with IRIs. The considerations in this section also apply to URI references and IRI references.7.17.1. URI/IRI Software Interfaces Software interfaces that handle URIs, such as URI-handling APIs and protocols transferring URIs, need interfaces and protocol elements that are designed to carry IRIs. In case the current handling in an API or protocol is based on US-ASCII, UTF-8 is recommended as the character encoding for IRIs,Duerst & Suignard Expires May 31, 2005 [Page 32] Internet-Draft Internationalized Resource Identifiers November 2004 because thisas it is compatible with US-ASCII, is in accordance with the recommendations of [RFC2277], and makesit easy to convertconverting to URIswhere necessary.easy. In any case, the API or protocol definition must clearly define the character encoding to be used. The transfer from URI-only to IRI-capable components requires no mapping, although the conversion described inSectionsection 3.2 above may be performed. It is preferable not to perform this inverse conversion when there is a chance that this cannot be done correctly.7.2Duerst & Suignard Standards Track [Page 32] RFC 3987 Internationalized Resource Identifiers January 2005 7.2. URI/IRI EntryThere areSome componentsthatallow users to enter URIs into thesystem, for examplesystem by typing ordictation.dictation, for example. This software must be updated to allow for IRI entry. A person viewing a visual representation of an IRI (as a sequence of glyphs, in some order, in some visual display) or hearing anIRI,IRI will useaan entry method for characters in the user's language to input the IRI. Depending on the script and the input method used, this may be a more or less complicated process. The process of IRI entry mustassure,ensure, asfarmuch as possible, that the restrictions defined inSectionsection 2.2 are met. This may be done by choosing appropriate input methods or variants/settings thereof, by appropriately converting the characters being input, by eliminating characters that cannot be converted, and/or by issuing a warning or error message to the user. As an example of variant settings, input method editors for East Asian Languages usually allow the input of Latin letters and related characters in full-width or half-width versions. For IRI input, the input method editor should be set so that it produces half-width Latin letters andpunctuation,punctuation and full-width Katakana. An input field primarily oronlysolely used for the input of URIs/IRIs may allow the user to view an IRI as it is mapped to a URI. Places where the input of IRIs is frequent may provide the possibility for viewing an IRI as mapped to a URI. This will help users when some of the software they use does not yet accept IRIs. An IRI input componentthat interfacesinterfacing to components that handle URIs, but not IRIs, must map the IRI to a URI before passing it tosuch a component.these components. For the input of IRIs with right-to-left characters, please seeSectionsection 4.3.Duerst & Suignard Expires May 31, 2005 [Page 33] Internet-Draft Internationalized Resource Identifiers November 2004 7.37.3. URI/IRI TransferBetweenbetween Applications Many applications,in particular manyparticularly mail user agents, try to detect URIs appearing in plain text. For this, they use some heuristics based on URI syntax. They then allow the user to click on such URIs and retrieve the corresponding resource in an appropriate (usually scheme-dependent) application. Duerst & Suignard Standards Track [Page 33] RFC 3987 Internationalized Resource Identifiers January 2005 Such applications have to be upgraded to use the IRI syntaxrather than the URI syntaxas a base for heuristics. In particular, a non-ASCII character should not be taken as the indication of the end of an IRI. Such applications also have to make sure that they correctly convert the detected IRI from the character encoding of the document or application where the IRI appears to the character encoding used by the system-wide IRI invocation mechanism, or to a URI (according toSectionsection 3.1) if the system-wide invocation mechanism only accepts URIs. The clipboard is another frequently used way to transfer URIs and IRIs from one application to another. On most platforms, the clipboard is able to store and transfer text in many languages and scripts. Correctly used, the clipboard transfers characters, not bytes, which will do the right thing with IRIs.7.47.4. URI/IRI Generation Systems that offer resources through the Internet, where those resources have logical names, sometimes automatically generate URIs for the resources they offer. For example, some HTTP servers can generate a directory listing for a filedirectory,directory and then respond to the generated URIs with the files. Many legacy character encodings are in use in various file systems. Many currently deployed systems do not transform the local character representation of the underlying system before generating URIs. For maximum interoperability, systems that generate resource identifiers shoulddomake the appropriate transformations. For example, if a file system contains a file namedrésumé.html,"résumé.html", a server should expose this asr%C3%A9sum%C3%A9.html"r%C3%A9sum%C3%A9.html" in a URI, which allowstouserésumé.htmlof "résumé.html" in an IRI, even if locally the file namelocallyis kept in a character encoding other than UTF-8. This recommendationin particularparticularly applies to HTTP servers. For FTP servers, similar considerationsapply,apply; seein particular[RFC2640].Duerst & Suignard Expires May 31, 2005 [Page 34] Internet-Draft Internationalized Resource Identifiers November 2004 7.57.5. URI/IRI Selection In some cases, resource owners and publishers have control over the IRIs used to identify their resources.SuchThis control is mostly executed by controlling the resource names, such as file names, directly. Duerst & Suignard Standards Track [Page 34] RFC 3987 Internationalized Resource Identifiers January 2005 Insuchthese cases, it is recommended to avoid choosing IRIs that are easily confused. For example, for US-ASCII, the lower-case ell"l"("l") is easily confused with the digit one"1",("1"), and the upper-case oh"O"("O") is easily confused with the digit zero"0".("0"). Publishers should avoid confusing users with "br0ken" or "1ame" identifiers. Outsideofthe US-ASCII repertoire, there are many more opportunities for confusion; a complete set of guidelines is too lengthy to include here. As long as names are limited to characters from a single script, native writers of a given script or language will know best when ambiguities can appear, and how they can be avoided. What may look ambiguous to a stranger may be completely obvious to the average native user. On the other hand, in some cases, the UCS contains variants for compatibilityreasons,reasons; forexampleexample, for typographic purposes. These should be avoided wherever possible. Although there may be exceptions,in generalnewly created resource names should generally be in NFKC [UTR15] (which means that they are also in NFC). As an example, the UCS contains the'fi'"fi" ligature at U+FB01 for compatibility reasons. Wherever possible, IRIs should use the two letters'f'"f" and'i'"i" rather than the'fi'"fi" ligature. An example where the latter may be used is in the query part of an IRI for an explicit search for a word written containing the'fi'"fi" ligature. In certain cases, there is a chance that characters from different scripts look the same. The best known example is the similarity of the Latin'A',"A", the Greek'Alpha',"Alpha", and the Cyrillic'A'."A". To avoid such cases, only IRIs should be created where all the characters in a single component are used together in a given language. This usually means that all of these characters will be from the same script, but there are languages that mix characters from different scripts (such as Japanese). This is similar to the heuristics used to distinguish between letters and numbers in the examples above. Also, for Latin, Greek, and Cyrillic, usinglower-caselowercase letters results in fewer ambiguities than usingupper-case letters. 7.6uppercase letters would. 7.6. Display of URIs/IRIs In situations where the rendering software is not expected to display non-ASCII parts of the IRI correctly using the available layout and font resources, these parts should be percent-encoded before beingDuerst & Suignard Expires May 31, 2005 [Page 35] Internet-Draft Internationalized Resource Identifiers November 2004displayed. For display of Bidi IRIs, please seeSectionsection 4.1.7.7Duerst & Suignard Standards Track [Page 35] RFC 3987 Internationalized Resource Identifiers January 2005 7.7. Interpretation of URIs and IRIs Software that interprets IRIs as the names of local resources should accept IRIs in multipleforms,forms and convert and match them with the appropriate local resource names. First, multiple representations include both IRIs in the native character encoding of the protocol and also their URI counterparts. Second, it may include URIs constructed based onothercharacter encodings other than UTF-8.SuchThese URIs may be produced by user agents that do not conform to this specification and that use legacy character encodings to convert non-ASCII characters to URIs. Whether this isnecessarynecessary, and what character encodings to cover, depends on a number of factors, such as the legacy character encodings used locally and the distribution of various versions of user agents. For example, software for Japanese may accept URIs in Shift_JIS and/or EUC-JP in addition to UTF-8. Third, it may include additional mappings to be more user-friendly and robust against transmission errors. These would be similar to howcurrentlysome servers currently treat URIs ascase-insensitive,case insensitive or perform additional matching to account for spelling errors. For characters beyond the US-ASCII repertoire, thismaymay, forexampleexample, include ignoring the accents on received IRIs or resourcenames where appropriate.names. Please note that such mappings, including case mappings, arelanguage-dependent.language dependent. It can be difficult tounambiguouslyidentify a resource unambiguously if too many mappings are taken into consideration. However, percent-encoded and not percent-encoded parts of IRIs can alwaysclearlybe clearly distinguished. Also, the regularity of UTF-8 (see [Duerst97]) makes the potential for collisions lower than it may seem atfirst sight. 7.8first. 7.8. Upgrading Strategy Where this recommendation places further constraints on software for which many instances are already deployed, it is important to introduce upgradescarefully,carefully and to be aware of the various interdependencies. If IRIs cannot be interpreted correctly, they should not be created, generated, or transported. This suggests that upgrading URI interpreting software to accept IRIs should have highest priority.Duerst & Suignard Expires May 31, 2005 [Page 36] Internet-Draft Internationalized Resource Identifiers November 2004On the other hand, a single IRI is interpreted only by a single or very few interpreters that are known in advance,whilealthough it may be entered and transported very widely. Duerst & Suignard Standards Track [Page 36] RFC 3987 Internationalized Resource Identifiers January 2005 Therefore, IRIs benefit most from a broad upgrade of software to be able to enter and transportIRIs, butIRIs. However, beforepublishing anyan individualIRI,IRI is published, care should be taken to upgrade the corresponding interpreting software in order to cover the forms expected to be received by various versions of entry and transport software. The upgrade of generating software to generate IRIs instead of using a local character encoding should happen only after the service is upgraded to accept IRIs. Similarly, IRIs should only be generated when the service accepts IRIs and the intervening infrastructure and protocol is known to transport them safely. Software converting from URIs to IRIs for display should be upgraded only after upgraded entry software has been widely deployed to the population that will see the displayed result.ItWhere there is a free choice of character encodings, it is often possible to reduce the effort and dependencies for upgrading to IRIs by using UTF-8 rather than anothercharacter encoding where there is a free choice of character encodings.encoding. For example, whensetting upa new file-based Webserver,server is set up, using UTF-8 as the character encoding for file names will make the transition to IRIs easier. Likewise, whensetting upa new Web form is set up using UTF-8 as the character encoding of the form page, the returned query URIs will use UTF-8 as the character encoding (unless the user, for whatever reason, changes the character encoding) and will therefore be compatible with IRIs. These recommendations, when taken together, will allow for the extension from URIs to IRIs in order to handle characters other than US-ASCII while minimizing interoperability problems. For considerations regarding the upgrade of URI scheme definitions,pleaseseeSectionsection 6.4. 8. Security Considerations The security considerations discussed in[RFCYYYY][RFC3986] also apply to IRIs. In addition, the following issues require particular care for IRIs. Incorrect encoding or decoding can lead to security problems. In particular, some UTF-8 decoders do not check against overlong byte sequences. As an example, a'/'"/" is encoded with the byte 0x2F both in UTF-8 and in US-ASCII, but some UTF-8 decoders also wrongly interpret the sequence 0xC0 0xAF as a'/'."/". A sequence such as Duerst & SuignardExpires May 31, 2005Standards Track [Page 37]Internet-DraftRFC 3987 Internationalized Resource IdentifiersNovember 2004 '%C0%AF..'January 2005 "%C0%AF.." may pass some security tests and then be interpreted as'/ ..'"/.." in a path if UTF-8 decoders are fault-tolerant, if conversion and checking are not done in the right order, and/or if reserved characters and unreserved characters are not clearly distinguished. There are various ways in which "spoofing" can occur with IRIs. "Spoofing" means that somebody may add a resource name that looks the same or similar to the user, but that points to a different resource. The added resource may pretend to be the real resource by looking verysimilar,similar but may contain all kinds of changes that may be difficult to spot and that can cause all kinds of problems. Most spoofing possibilities for IRIs are extensions of those for URIs. Spoofing can occur for various reasons.A first reason is thatFirst, a user's normalization expectationsof a useror actual normalization when entering anIRI,IRI orwhentranscoding an IRI from a legacy characterencoding,encoding do not match the normalization used on the server side. Conceptually, this is no different from the problems surrounding the use of case-insensitive web servers. For example, a popular web page with amixed casemixed-case name(http://big.example.com/PopularPage.html)("http://big.example.com/PopularPage.html") might be "spoofed" by someone who is able to createhttp://big.example.com/popularpage.html."http://big.example.com/popularpage.html". However, the use of unnormalized character sequences, and of additional mappings for user convenience, may increase the chance for spoofing. Protocols and servers that allow the creation of resources with names that are not normalized are particularly vulnerable to such attacks. This is an inherent security problem of the relevant protocol, server, orresource,resource and is not specific to IRIs, but it is mentioned here for completeness. Spoofing can occur in various IRI components, such as the domain name part or a path part. For considerations specific to the domain name part, see [RFC3491]. For the path part, administrators of siteswhichthat allow independent users to create resources in the samesubareasub area mayneedhave to be careful to check for spoofing. Spoofing can occur because in theUCS, there areUCS many charactersthatlook very similar. Details are discussed in Section 7.5. Again, this is very similar to spoofing possibilities on US-ASCII,e.g.e.g., using'br0ken'"br0ken" or'1ame'"1ame" URIs. Spoofing can occur when URIs with percent-encodings based on various character encodings are accepted to deal with older user agents. In some cases,in particularparticularly for Latin-based resource names, this is usually easy to detect because UTF-8-encoded names, when interpreted and viewed as legacy character encodings, produce mostly garbage.In other cases, whenDuerst & Suignard Standards Track [Page 38] RFC 3987 Internationalized Resource Identifiers January 2005 When concurrently used character encodings have a similarstructure,structure but there are no characters that have exactly theDuerst & Suignard Expires May 31, 2005 [Page 38] Internet-Draft Internationalized Resource Identifiers November 2004same encoding, detection is more difficult. Spoofing can occur with bidirectional IRIs, if the restrictions inSectionsection 4.2 are not followed. The same visual representation may be interpreted as different logical representations, and vice versa. It is also very important that a correct Unicode bidirectional implementationisbe used. 9.IANA Considerations This document has no actions for IANA. 10.Acknowledgements We would like to thank Larry Masinter for his work as coauthor of many earlier versions of this document (draft-masinter-url-i18n-xx). The discussion on the issue addressed herehasstarted a long time ago. There was a thread in the HTML working group in August 1995 (under the topic of "Globalizing URIs") and in the www-international mailing list in July 1996 (under the topic of "Internationalization and URLs"), and there were ad-hoc meetings at the Unicode conferences in September 1995 and September 1997. Many thanks go to Francois Yergeau, Matitiahu Allouche, Roy Fielding, Tim Berners-Lee, Mark Davis, M.T. Carrasco Benitez, James Clark, Tim Bray, Chris Wendt, Yaron Goland, Andrea Vine, Misha Wolf, Leslie Daigle, Ted Hardie, Bill Fenner, Margaret Wasserman, Russ Housley, Makoto MURATA, Steven Atkin, Ryan Stansifer, Tex Texin, Graham Klyne, Bjoern Hoehrmann, Chris Lilley, Ian Jacobs, Adam Costello, Dan Oscarson, Elliotte Rusty Harold, Mike J. Brown, Roy Badami, Jonathan Rosenne, Asmus Freytag, Simon Josefsson, Carlos Viegas Damasio, Chris Haynes, Walter Underwood, and many others for help with understanding the issues and possible solutions, and with getting the details right. This document is a product of the Internationalization Working Group (I18N WG) of the World Wide Web Consortium (W3C). Thanks to the members of the W3C I18N Working Group and Interest Group for their contributions and their work on [CharMod]. Thanks also go to the members of many other W3C Working Groups for adopting IRIs, and to the members of the Montreal IAB Workshop on Internationalization and Localization for their review.11.Duerst & Suignard Standards Track [Page 39] RFC 3987 Internationalized Resource Identifiers January 2005 10. References11.110.1. Normative References [ASCII] American National Standards Institute, "Coded CharacterDuerst & Suignard Expires May 31, 2005 [Page 39] Internet-Draft Internationalized Resource Identifiers November 2004Set -- 7-bit American Standard Code for Information Interchange", ANSI X3.4, 1986. [ISO10646] International Organization for Standardization, "ISO/IEC 10646:2003: Information Technology - Universal Multiple-Octet Coded Character Set (UCS)", ISO Standard 10646, December 2003. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2234] Crocker, D. and P. Overell, "Augmented BNF for Syntax Specifications: ABNF", RFC 2234, November 1997. [RFC3490] Faltstrom, P., Hoffman,P.P., and A. Costello, "Internationalizing Domain Names in Applications (IDNA)", RFC 3490, March 2003. [RFC3491] Hoffman, P. and M. Blanchet, "Nameprep: A Stringprep Profile for Internationalized Domain Names (IDN)", RFC 3491, March 2003. [RFC3629] Yergeau, F., "UTF-8, a transformation format of ISO 10646", STD 63, RFC 3629, November 2003.[RFCYYYY][RFC3986] Berners-Lee, T., Fielding,R.R., and L. Masinter, "Uniform Resource Identifier (URI): GenericSyntax (Note to the RFC Editor: Please update this reference with theSyntax", STD 66, RFCresulting from draft-fielding-uri-rfc2396bis-xx.txt, and remove this Note)", draft-fielding-uri-rfc2396bis-07 (work in progress), April 2004.3986, January 2005. [UNI9] Davis, M., "The Bidirectional Algorithm", Unicode Standard Annex #9, March 2004, <http://www.unicode.org/reports/tr9/tr9-13.html>. [UNIV4] The Unicode Consortium, "The Unicode Standard, Version 4.0.1, defined by: The Unicode Standard, Version 4.0 (Reading, MA, Addison-Wesley, 2003. ISBN 0-321-18578-1), as amended by Unicode 4.0.1 (http://www.unicode.org/versions/Unicode4.0.1/)", March 2004. Duerst & Suignard Standards Track [Page 40] RFC 3987 Internationalized Resource Identifiers January 2005 [UTR15] Davis, M. and M. Duerst, "Unicode Normalization Forms", Unicode Standard Annex #15, April 2003,<http://www.unicode.org/unicode/reports/tr15/ tr15-23.html>. Duerst & Suignard Expires May 31, 2005 [Page 40] Internet-Draft Internationalized Resource Identifiers November 2004 11.2 Non-normative<http://www.unicode.org/unicode/reports/ tr15/tr15-23.html>. 10.2. Informative References [BidiEx] "Examples of bidirectional IRIs",<http://www.w3.org/International/iri-edit/BidiExamples>.<http://www.w3.org/International/iri-edit/ BidiExamples>. [CharMod] Duerst, M., Yergeau, F., Ishida, R., Wolf,M.M., and T. Texin, "Character Model for the World WideWeb",Web: Resource Identifiers", World Wide Web ConsortiumWorking Draft, FebruaryCandidate Recommendation, November 2004,<http://www.w3.org/TR/charmod>.<http://www.w3.org/TR/charmod-resid>. [Duerst97] Duerst, M., "The Properties and Promises of UTF-8", Proc. 11th International Unicode Conference, San Jose , September 1997,<http://www.ifi.unizh.ch/mml/mduerst/papers/PDF/ IUC11-UTF-8.pdf>.<http://www.ifi.unizh.ch/mml/mduerst/papers/ PDF/IUC11-UTF-8.pdf>. [Gettys] Gettys, J., "URI Model Consequences", <http://www.w3.org/DesignIssues/ModelConsequences>. [HTML4] Raggett, D., Le Hors,A.A., and I. Jacobs, "HTML 4.01 Specification", World Wide Web Consortium Recommendation, December 1999,<http://www.w3.org/TR/REC-html40/appendix/<http://www.w3.org/TR/html401/appendix/ notes.html#h-B.2>. [RFC2045] Freed, N. and N.Freed,Borenstein, "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies", RFC 2045, November 1996. [RFC2130] Weider, C., Preston, C., Simonsen, K., Alvestrand, H., Atkinson, R., Crispin,M.M., and P. Svanberg, "The Report of the IAB Character Set Workshop held 29 February - 1 March, 1996", RFC 2130, April 1997. [RFC2141] Moats, R., "URN Syntax", RFC 2141, May 1997. [RFC2192] Newman, C., "IMAP URL Scheme", RFC 2192, September 1997. [RFC2277] Alvestrand, H., "IETF Policy on Character Sets and Languages", BCP 18, RFC 2277, January 1998. Duerst & Suignard Standards Track [Page 41] RFC 3987 Internationalized Resource Identifiers January 2005 [RFC2368] Hoffman, P., Masinter,L.L., and J. Zawinski, "The mailto URL scheme", RFC 2368, July 1998. [RFC2384] Gellens, R., "POP URL Scheme", RFC 2384, August 1998. [RFC2396] Berners-Lee, T., Fielding,R.R., and L. Masinter, "UniformDuerst & Suignard Expires May 31, 2005 [Page 41] Internet-Draft Internationalized Resource Identifiers November 2004Resource Identifiers (URI): Generic Syntax", RFC 2396, August 1998. [RFC2397] Masinter, L., "The "data" URL scheme", RFC 2397, August 1998. [RFC2616] Fielding, R., Gettys, J., Mogul, J.,Nielsen,Frystyk, H., Masinter, L., Leach,P.P., and T. Berners-Lee, "Hypertext Transfer Protocol -- HTTP/1.1", RFC 2616, June 1999. [RFC2640] Curtin, B., "Internationalization of the File Transfer Protocol", RFC 2640, July 1999. [RFC2718] Masinter, L., Alvestrand, H., Zigmond,D.D., and R. Petke, "Guidelines for new URL Schemes", RFC 2718, November 1999. [UNIXML] Duerst, M. and A. Freytag, "Unicode in XML and other Markup Languages", Unicode Technical Report #20, World Wide Web Consortium Note,February 2002,June 2003, <http://www.w3.org/TR/unicode-xml/>. [XLink] DeRose, S., Maler,E.E., and D. Orchard, "XML Linking Language (XLink) Version 1.0", World Wide Web Consortium Recommendation, June 2001, <http://www.w3.org/TR/xlink/#link-locators>. [XML1] Bray, T., Paoli, J., Sperberg-McQueen, C., Maler,E.E., and F. Yergeau, "Extensible Markup Language (XML) 1.0 (Third Edition)", World Wide Web Consortium Recommendation, February 2004, <http://www.w3.org/TR/REC-xml#sec-external-ent>. [XMLNamespace] Bray, T., Hollander,D.D., and A. Layman, "Namespaces in XML", World Wide Web Consortium Recommendation, January 1999, <http://www.w3.org/TR/REC-xml-names>. [XMLSchema] Biron, P. and A. Malhotra, "XML Schema Part 2: Datatypes", World Wide Web Consortium Recommendation, May 2001, <http://www.w3.org/TR/xmlschema-2/#anyURI>. Duerst & Suignard Standards Track [Page 42] RFC 3987 Internationalized Resource Identifiers January 2005 [XPointer] Grosso, P., Maler, E., Marsh, J. and N. Walsh, "XPointer Framework", World Wide Web Consortium Recommendation, March 2003, <http://www.w3.org/TR/xptr-framework/#escaping>. Duerst & SuignardExpires May 31, 2005Standards Track [Page42] Internet-Draft43] RFC 3987 Internationalized Resource IdentifiersNovember 2004 Authors' Addresses Martin Duerst (Note: Please write "Duerst" with u-umlaut wherever possible, for example as "Dürst" in XML and HTML.) World Wide Web Consortium 5322 Endo Fujisawa, Kanagawa 252-8520 Japan Phone: +81 466 49 1170 Fax: +81 466 49 1171 EMail: mailto:duerst@w3.org URI: http://www.w3.org/People/D%C3%BCrst/ (Note: This is the percent-encoded form of an IRI.) Michel Suignard Microsoft Corporation One Microsoft Way Redmond, WA 98052 U.S.A. Phone: +1 425 882-8080 EMail: mailto:michelsu@microsoft.com URI: http://www.suignard.comJanuary 2005 Appendix A. Design Alternatives This section shortly summarizes major design alternatives and the reasons for why they were not chosen. AppendixA.1A.1. New Scheme(s) Introducing new schemes (forexampleexample, httpi:, ftpi:,...) or a new metascheme(e.g.(e.g., i:, leading to URI/IRI prefixes such as i:http:, i:ftp:,...) was proposed to make IRI-to-URI conversionscheme-dependentscheme dependent or to distinguish between percent-encodings resulting from IRI-to-URI conversion and percent-encodings from legacy character encodings. New schemes are not needed to distinguish URIs from true IRIs(i.e.(i.e., IRIs that contain non-ASCII characters). The benefit of being able to detect the origin of percent-encodings is marginal,becauseas UTF-8 can be detected with very high reliability. Deploying new schemes is extremely hard, so not requiring new schemes for IRIs makes deployment of IRIs vastly easier. Making conversionscheme-dependentscheme dependent is highlyinadvisable,inadvisable and would be encouraged by separate schemes for IRIs. Usingana uniform convention for conversion from IRIs to URIs makes IRI implementation orthogonal to the introduction of actual new schemes.Duerst & Suignard Expires May 31, 2005 [Page 43] Internet-Draft Internationalized Resource Identifiers November 2004AppendixA.2 OtherA.2. Character EncodingsthanOther Than UTF-8 At an early stage, UTF-7 was considered as an alternative to UTF-8 whenconvertingIRIs are converted to URIs. UTF-7 would not have neededpercent-encoding,percent-encoding andwouldin most cases would have been shorter than percent-encoded UTF-8. Using UTF-8 avoids a double layering and overloading of the use of the "+" character. UTF-8 is fully compatible withUS-ASCII,US-ASCII and has therefore been recommended by the IETF, and is being usedwidely, whilewidely. UTF-7 has never been used much and is now clearly being discouraged. Requiring implementations to convert from UTF-8 to UTF-7 and back would be an additional implementation burden. AppendixA.3A.3. New Encoding Convention Instead of using the existing percent-encoding convention of URIs, which is based on octets, the idea was to create a new encodingconvention,convention; forexampleexample, to use'%u'"%u" to introduce UCS code points. Duerst & Suignard Standards Track [Page 44] RFC 3987 Internationalized Resource Identifiers January 2005 Using the existing octet-based percent-encoding mechanism does not need an upgrade of the URIsyntax,syntax and does not need corresponding server upgrades. AppendixA.4A.4. Indicating Character Encodings in the URI/IRI Some proposals suggested indicating the character encodings used in an URI or IRI with some new syntactic convention in the URI itself, similar to the'charset'"charset" parameter foremailse-mails and Web pages. As an example, the label in square brackets inhttp://www.example.org/ros[iso-8859-1]é"http://www.example.org/ros[iso-8859-1]é"; indicated that the followingé"é"; had to be interpreted as iso-8859-1.UsingIf UTF-8only does not needis used exclusively, an upgrade to the URIsyntax.syntax is not needed. It avoids potentially multiple labels that have to be copied correctly in all cases, even on the side of a bus or on a napkin, leading to usability problemsto the extent of(and being prohibitivelyannoying. Usingannoying). Exclusively using UTF-8onlyalso reduces transcoding errors andconfusions.confusion. Authors' Addresses Martin Duerst (Note: Please write "Duerst" with u-umlaut wherever possible, for example as "Dürst" in XML and HTML.) World Wide Web Consortium 5322 Endo Fujisawa, Kanagawa 252-8520 Japan Phone: +81 466 49 1170 Fax: +81 466 49 1171 EMail: duerst@w3.org URI: http://www.w3.org/People/D%C3%BCrst/ (Note: This is the percent-encoded form of an IRI.) Michel Suignard Microsoft Corporation One Microsoft Way Redmond, WA 98052 U.S.A. Phone: +1 425 882-8080 EMail: michelsu@microsoft.com URI: http://www.suignard.com Duerst & SuignardExpires May 31, 2005Standards Track [Page44] Internet-Draft45] RFC 3987 Internationalized Resource IdentifiersNovember 2004January 2005 Full Copyright Statement Copyright (C) The Internet Society (2005). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual PropertyStatementThe IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the IETF's procedures with respect to rights inRFC documentsIETF Documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF atietf-ipr@ietf.org. Disclaimer of Validity This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Copyright Statement Copyright (C) The Internet Society (2004). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. Acknowledgmentietf- ipr@ietf.org. Acknowledgement Funding for the RFC Editor function is currently provided by the Internet Society. Duerst & SuignardExpires May 31, 2005Standards Track [Page45]46] ----