IANA Registration for Enumservice 'web' and 'ft'
updated by
- rfc-6118 — Update of Legacy IANA Registrations of Enumservices
Extracted elements (14)
Enumservices are defined as hints indicating the kind of service associated with a URI, not the protocol or method of connection, leaving end systems to decide how to execute the service based on local policy.
The 'type' parameter defines the service generically and the 'subtype' defines the URI scheme, because the same URI scheme may be used for different services and the same service may use different URI schemes.
More than one Enumservice can be included within a single NAPTR record, indicating that more than one service can be achieved by using the associated URI scheme.
The client MUST ask the querying user for confirmation before evaluating a web URL; the client MUST NOT download and evaluate web content automatically, due to risks from embedded executable content.
The data subject MUST give explicit informed consent when their data is published in ENUM, given the implications of publishing on a globally accessible database.
The user SHOULD be asked to confirm opening a web page or starting an ftp session, particularly if the ftp client is configured to send the user's email address as an anonymous password.
The user SHOULD receive an indication of whether their communication is secured, as the ENUM-using application may appear different from the user's normal browser.
Publication of E.164 numbers in ENUM may be effectively permanent because third-party harvesting can copy data before removal; users should be informed that removal from ENUM does not remove harvested copies.
An Enumservice registration must specify a Name, Type, Subtype, URI Scheme, Functional Specification, Security Considerations, Intended Usage, and Authors, as required by RFC 3761's registration process.
IANA registration of Enumservice 'ft' with subtype 'ftp' using URI scheme 'ftp:', indicating the resource is usable for file retrieval as specified in RFC 1738.
IANA registration of Enumservice 'web' with subtype 'http' using URI scheme 'http:', indicating the resource is capable of being a source of information.
IANA registration of Enumservice 'web' with subtype 'https' using URI scheme 'https:', indicating the resource is a source of information contactable via TLS or SSL.
DNS-based ENUM data is globally visible and can be harvested automatically by third parties without the data subject's knowledge, enabling spam via junk faxes or junk SMS linked to published E.164 numbers.
Evaluating a web URL involves risks from embedded or linked executable content; automatic evaluation without user confirmation exposes the querying user to automatic download and execution of potentially malicious content.