rfc-6685

Expert Review for Incident Object Description Exchange Format (IODEF) Extensions in IANA XML Registry

B. Trammell
date2012-07 streamIETF areasec wgmile statusPROPOSED STANDARD pages3 canonicalhttps://www.rfc-editor.org/rfc/rfc6685 doi10.17487/RFC6685
This document specifies restrictions on additions to the subset of the IANA XML Namespace and Schema registries, to require Expert Review for extensions to Incident Object Description Exchange Format (IODEF). [STANDARDS-TRACK]

obsoleted by

updates

Extracted elements (6)

design-rationale §1

IODEF extensions registered via AdditionalData and RecordItem class extensions should be reviewed by IODEF experts — beyond standard IANA schema review — to ensure compatibility with IODEF and with other existing IODEF extensions. This prevents incompatible or redundant extensions from proliferating in the registry.

registry, security, process

interoperability-note §1

Registry requests for IODEF XML namespace and schema entries must be accompanied by a review ensuring that the specified AdditionalData and/or RecordItem contents are compatible with IODEF (RFC 5070) and with other existing IODEF extensions.

registry, security

normative-requirement §2 REQUIRED

Changes to the XML Schema registry for schema names beginning with 'urn:ietf:params:xml:schema:iodef' are subject to an additional IODEF Expert Review for IODEF correctness and appropriateness.

registry, security

normative-requirement §2 REQUIRED

The IODEF expert(s) for Expert Review of IODEF-related XML registry entries will be designated by the IETF Security Area Directors.

registry, security, process

registry §4

The IANA XML Schema registry (urn:ietf:params:xml:schema:iodef*) now requires Expert Review for all IODEF extensions, updating the registration policy established by RFC 5070 and RFC 3688.

registry, security

security-consideration §3

This document explicitly states it has no security considerations; its scope is limited to administrative Expert Review requirements for IANA XML registry entries related to IODEF extensions.

security, registry