Internet Engineering Task Force (IETF) M. Dürst Request for Comments: 9694 Aoyama Gakuin University BCP: 13 December 2024 Updates: 6838 Category: Best Current Practice ISSN: 2070-1721 Guidelines for the Definition of New Top-Level Media Types Abstract This document defines best practices for defining new top-level media types. It also introduces a registry for top-level media types, and contains a short history of top-level media types. It updates RFC 6838. Status of This Memo This memo documents an Internet Best Current Practice. This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on BCPs is available in Section 2 of RFC 7841. Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at https://www.rfc-editor.org/info/rfc9694. Copyright Notice Copyright (c) 2024 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Introduction 1.1. Background 1.2. Requirements Language 2. Rules and Criteria for the Registration of New Top-Level Media Types 2.1. Required Criteria 2.2. Additional Considerations 2.3. Negative Criteria 3. Top-Level Media Type History 4. IANA Considerations 4.1. Registration of Top-level Media Types 4.2. Initialization of the Registry of Top-Level Media Types 5. Security Considerations Acknowledgements References Normative References Informative References Author's Address 1. Introduction This document defines best practices for defining new top-level media types. Top-level media types ('top-level types' for short) appear to the left of the slash in a media type, examples being 'text/...', 'application/...', 'image/...', and so on. Please note that top- level types are different from trees (standards tree, vendor tree, personal tree), which (except for the standards tree) are indicated immediately to the right of the slash with a prefix of '.../vnd.' or '.../prs.'. Section 4.2.7 of RFC 6838 [RFC6838] only summarily gives criteria for defining additional top-level media types. This document provides more detailed criteria for defining additional top- level media types. It therefore updates RFC 6838 [RFC6838]. 1.1. Background New top-level types are rare enough and different enough from each other that each application needs to be evaluated separately. The main protocol extension point for media types are subtypes below each of the main types. For formats that do not fit below any other top- level type, the 'application' top-level type can always be used. The main function of media types and subtypes is the dispatch of data formats to application code. In most cases, this requires and is done using the full type (i.e., including the subtype, and often some parameters). The top-level type can occasionally serve as a fallback for the tentative dispatch to applications handling a very wide range of related formats. Please note that assumptions about the correctness of a media type must be made carefully, as it could be under the control of an attacker. In some older scenarios, it may also have been possible to identify a device (e.g., a phone for audio messages, a printer or fax device for images, a video recorder for videos, a computer for 'application' subtypes). However, the current hardware landscape, where computers and smartphones can handle a very wide variety of media, makes such a scenario look somewhat far-fetched. The top-level type can be used for user-directed information. Besides direct inspection of the type string by the user, this includes using different types of default icons for different top- level types. 1.2. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. 2. Rules and Criteria for the Registration of New Top-Level Media Types This section describes the rules and criteria for new top-level media types, including criteria already defined in RFC 6838 [RFC6838]. 2.1. Required Criteria The following is the list of required criteria for the definition of a new top-level type. Motivations for the requirements are also included. * Every new top-level type MUST be defined in a Standards Track RFC (see Section 4.9 of RFC 8126 [RFC8126]). This will ensure there is sufficient community interest, review, and consensus appropriate for a new top-level type. * The IANA Considerations section of an RFC defining a new top-level type MUST request that IANA add this new top-level type to the registry of top-level types. * The criteria for what types do and do not fall under the new top- level type MUST be defined clearly. Clear criteria are expected to help expert reviewers evaluate whether or not a subtype belongs below the new type, and whether the registration template for a subtype contains the appropriate information. Criteria that cannot be defined clearly is a strong indication that whatever is being talked about is not suitable as a top-level type. * Any RFC defining a new top-level type MUST clearly document the security considerations applying to all or a significant subset of subtypes. * At a minimum, one subtype MUST be described. A top-level type without any subtypes serves no purpose. Please note that the 'example' top-level describes the subtype 'example'. 2.2. Additional Considerations * Existing wide use of an unregistered top-level type may be an indication of a need, and therefore may be an argument for formally defining this new top-level type. * On the other hand, the use of unregistered top-level types is highly discouraged. * Use of an IETF WG to define a new top-level type is not needed, but may be advisable in some cases. There are examples of new top-level type definitions without a WG (RFC 2077 [RFC2077]), with a short, dedicated WG (RFC 8081 [RFC8081]), and with a WG that included other related work (RFC 9695 [RFC9695]). * The document defining the new top-level type should include initial registrations of actual subtypes. The exception may be a top-level type similar to 'example'. This will help show the need for the new top-level type, allow checking the appropriateness of the definition of the new top-level type, avoid separate work for registering an initial slate of subtypes, and provide examples of what is considered a valid subtype for future subtype registrations. * The registration and actual use of a certain number of subtypes under the new top-level type should be expected. The existence of a single subtype should not be enough; it should be clear that new similar types may appear in the future. Otherwise, the creation of a new top-level type is most probably not justified. * The proposers of the new top-level type and the wider community should be willing to commit to emitting and consuming the new top- level type in environments that they control. * Desirability for common parameters: The fact that a group of (potential) types have (mostly) common parameters may be an indication that they belong under a common new top-level type. * Top-level types can help humans with understanding and debugging. Therefore, evaluating how a new top-level type helps humans understand types may be crucial. But as often with humans, opinions may widely differ. * Common restrictions may apply to all subtypes of a top-level type. Examples are the restriction to CRLF line endings for subtypes of type 'text' (at least in the context of electronic mail), or on subtypes of type 'multipart'. * Top-level types are also used frequently in dispatching code. For example, "multipart/*" is frequently handled as multipart/mixed, without understanding of a specific subtype. The top-level types 'image', 'audio', and 'video' are also often handled generically. Documents with these top-level types can be passed to applications handling a wide variety of image, audio, or video formats. HTML- generating applications can select different HTML elements (e.g., or