You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: ADOPTION.md
+25-14Lines changed: 25 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -85,7 +85,7 @@ safe to ingest without negotiation).
85
85
| New media type / IANA burden? |**No new media type.** One entry in the existing "Well-Known URIs" registry — the same footprint as security.txt (RFC 9116). |
86
86
| Registration bar | The registry's policy is **Specification Required** (RFC 8615 §3.1) — which includes designated-expert review per RFC 8126 and is designed exactly for stable specs like this; no WG/RG adoption is required. |
87
87
| Registry status requested |**Provisional** — the honest ask for an Independent Submission per RFC 8615 §3.1, and what the designated expert assigns to comparable new entries (gpc.json, change-password, ecips); explicitly promotable to permanent once in broad use. No over-claim for the expert to push back on. |
| Security/privacy reviewed? | Yes — dedicated Security and Privacy sections (DoS caps + bounded query key space, trust/spoofing, greenwashing, traffic-analysis floor, path-disclosure allowlist, deterministic fingerprinting noise, TLS), plus a dedicated Internationalization Considerations section (BCP 18/RFC 2277 protocol-element vs. text classification, added in the prepared `-05` revision). |
89
89
| Maintenance risk | Minimal: open, forward-compatible schemas (unknown members permitted; clients MUST ignore them) with an informational version label — future fields need **no revision of the RFC** and no new IANA registry. |
90
90
| Implementation risk | A production reference gateway + dual independent validators already pass end-to-end (see §9). |
91
91
@@ -116,8 +116,9 @@ fragmentation.
116
116
(no in-band sentinel; a member present always carries a real value); clients tolerate
117
117
rather than reject defective values (wrong JSON type, `null`, out-of-range, `sci-score`
118
118
without `functional-unit`); and field-driven compatibility rules keep historical 1.x
119
-
documents processable. A mandatory free-form `target` member names the reporting subject
120
-
(origin host, path prefix, entity, tenant, or carbon.txt-listed site), classified by an
119
+
documents processable. A mandatory `target` member — an opaque identifier compared
120
+
octet-for-octet, never translated — names the reporting subject (origin host, path
121
+
prefix, entity, tenant, or data source), classified by an
0 commit comments