Registry policies “… with Expert Review”

Status of This Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.¶

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.¶

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."¶

This Internet-Draft will expire on 6 October 2024.¶

Copyright Notice

Copyright (c) 2024 IETF Trust and the persons identified as the document authors. All rights reserved.¶

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License.¶

Table of Contents

1. Introduction

Section 4 of RFC 8126 [BCP26] defines a number of well-known policies that can be referenced as registration policies from documents that set up IANA registries. Some of these policies involve a Designated Expert, who is intended to be aware of the fine points of what should or should not become a registration in that registry (Sections 4.5 and 4.6 of RFC 8126 [BCP26]). Some other policies involve a review body that autonomously, not involving a Designated Expert, decide whether a registration should be accepted (Sections 4.7, 4.8, 4.9, and 4.10 of RFC 8126 [BCP26]).¶

In the past, this has occasionally led to friction where a Designated Expert was not consulted by the review body before approving the registration, missing some finer point (such as certain consistency requirements) that would have been pointed out by the expert.¶

This document updates Section 4 of RFC 8126 [BCP26], adding registry policies that augment an existing policy that is based on a review body action with the additional requirement for a Designated Expert review.¶

It also updates Sections 2 and 3 of RFC 7120 [BCP100] with the necessary process to perform early allocations for registries with one of the augmented policies.¶

2. Augmented Registration Policies

For each of the well-known policies defined in Sections 4.7, 4.8, 4.9, and 4.10 of RFC 8126 [BCP26], this document adds a parallel augmented policy that also specifies involving a Designated Expert.¶

3. Early Allocation for Augmented Registration Policies

This document updates RFC 7120 [BCP100] to apply to the augmented policies defined above in Section 2.1, Section 2.2, and Section 2.3.¶

Specifically:¶

• Item (a) in Section 2 of RFC 7120 [BCP100] is extended to include the three augmented policies.¶

• Item (2) in Section 3.1 of RFC 7120 [BCP100] is amended as follows:¶

2. The WG chairs determine whether the conditions for early allocations described in Section 2 are met, particularly conditions (c) and (d). For the registration policies defined in Section 2 of RFC-XXXX, the WG chairs first request review and approval from the Designated Expert.¶

RFC editor: please replace XXXX by the RFC number of this document and delete this note.¶

4. Security Considerations

The security considerations of Section 5 of RFC 7120 [BCP100] and Section 12 of RFC 8126 [BCP26] apply. Augmenting registration policies by Designated Expert involvement may help reduce the potential of introducing security issues by adding inconsistent or insecure registrations to a registry.¶

5. IANA Considerations

This document is all about procedures that need to be implemented by IANA, but by itself has no IANA actions.¶

Appendix A. Usage in Existing Specifications

This appendix is informative.¶

Examples for RFCs (and one RFC-to-be) and registries created from them that use "Standards Action with Expert Review", without further explanation of this usage, include:¶

• [IANA.uuid], interpreting the approved [I-D.ietf-uuidrev-rfc4122bis-14]¶

• [IANA.cose], interpreting Section 11 of [RFC9052] in conjunction with the older Section 16 of [RFC8152]¶

• [IANA.ace], interpreting Section 9 of [RFC9203]¶

• Section 6 of [RFC9393]¶

• Section 10 of [RFC9528]¶

Acknowledgments

The creation of this document was prompted by an IESG ballot comment from John Scudder, which led to the observation that the now somewhat common practice of augmenting review-body-based registry policies by Expert Review had not been documented sufficiently.¶

Authors' Addresses