[saag] Re: Fwd: [Uri-review] [IANA #1449893] Reg istration of URI scheme 'cttps'

--===============7077578970014574872==
Content-Type: multipart/alternative; boundary="0000000000001d09600651ad2bf4"

--0000000000001d09600651ad2bf4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

To answer the question asked:
It is impossible to separate security merits from a protocol such as
TLS/SSL.  In this case, as has been stated, the protocol being
provisionally registered has many vulnerabilities.  I certainly hope that
there is little uptake.

Deb Cooley
Sec AD

On Tue, May 12, 2026 at 8:29=E2=80=AFAM Graham Klyne <[email protected]> wr=
ote:

> I=E2=80=99m forwarding this for information, as I=E2=80=99m not sure if a=
nyone in security
> area would otherwise be aware of this.
>
> Provisional URI schemes are registered FCFS, without review, so there=E2=
=80=99s no
> IETF-approved action here, but it feels to me a bit like a new generic
> security transport being packaged as a web protocol.  I wonder if such an
> initiative, regardless of its security merits, should be a TLS/SSL option
> rather than a new protocol scheme?  I don=E2=80=99t know enough about sec=
urity
> protocols to judge.
>

> #g
>
> (Mark Baker cc=E2=80=99ed for information as current URI scheme reviewer.=
)
>
>
> Sent from my iPhone
>
> Begin forwarded message:
>
> *From:* Sabrina Tanamal via RT <[email protected]>
> *Date:* 12 May 2026 at 01:10:45 BST
> *To:* [email protected]
> *Cc:* [email protected]
> *Subject:* *[Uri-review] [IANA #1449893] Registration of URI scheme
> 'cttps'*
> *Reply-To:* [email protected]
>
> =EF=BB=BFDear Saso,
>
> We've added provisional URI scheme "cttps" to the registry:
>
> https://www.iana.org/assignments/uri-schemes/prov/cttps
>
> Registry: https://www.iana.org/assignments/uri-schemes
>
> Per the designated expert for URI Schemes registry, we're also notifying
> the [email protected] mailing list that this provisional registration
> has been completed.
>
> Best regards,
>
> Sabrina Tanamal
> IANA
>
> _______________________________________________
> Uri-review mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
>
> _______________________________________________
> saag mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
>

--0000000000001d09600651ad2bf4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>To answer the question asked:</div><div>It is impossi=
ble to separate security merits from a protocol such as=20
TLS/SSL.=C2=A0 In this case, as has been stated, the protocol being=20
provisionally registered has many vulnerabilities.=C2=A0 I certainly hope=
=20
that there is little uptake.

</div><div><br></div><div>Deb Cooley=C2=A0</div><div>Sec AD</div><br><div c=
lass=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_=
attr">On Tue, May 12, 2026 at 8:29=E2=80=AFAM Graham Klyne &lt;<a href=3D"m=
ailto:[email protected]">[email protected]</a>&gt; wrote:<br></div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px=
 solid rgb(204,204,204);padding-left:1ex"><div dir=3D"auto"><div>I=E2=80=99=
m forwarding this for information, as I=E2=80=99m not sure if anyone in sec=
urity area would otherwise be aware of this. =C2=A0</div><div><br></div><di=
v>Provisional URI schemes are registered FCFS, without review, so there=E2=
=80=99s no IETF-approved action here, but it feels to me a bit like a new g=
eneric security transport being packaged as a web protocol.=C2=A0 I wonder =
if such an initiative, regardless of its security merits, should be a TLS/S=
SL option rather than a new protocol scheme?=C2=A0 I don=E2=80=99t know eno=
ugh about security protocols to judge.</div></div></blockquote><blockquote =
class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px sol=
id rgb(204,204,204);padding-left:1ex"><div dir=3D"auto"><div><br></div><div=
>#g</div><div><br></div><div>(Mark Baker cc=E2=80=99ed for information as c=
urrent URI scheme reviewer.)</div><div><br></div><br id=3D"m_-5764639881121=
253434lineBreakAtBeginningOfSignature"><div dir=3D"ltr">Sent from my iPhone=
</div><div dir=3D"ltr"><br>Begin forwarded message:<br><br></div><blockquot=
e type=3D"cite"><div dir=3D"ltr"><b>From:</b> Sabrina Tanamal via RT &lt;<a=
 href=3D"mailto:[email protected]" target=3D"_blank">iana-prot-param=
@iana.org</a>&gt;<br><b>Date:</b> 12 May 2026 at 01:10:45 BST<br><b>To:</b>=
 <a href=3D"mailto:[email protected]" target=3D"_blank">notdreampvp@gma=
il.com</a><br><b>Cc:</b> <a href=3D"mailto:[email protected]" target=3D"_=
blank">[email protected]</a><br><b>Subject:</b> <b>[Uri-review] [IANA #14=
49893] Registration of URI scheme &#39;cttps&#39;</b><br><b>Reply-To:</b> <=
a href=3D"mailto:[email protected]" target=3D"_blank">iana-prot-para=
[email protected]</a><br><br></div></blockquote><blockquote type=3D"cite"><div dir=
=3D"ltr">=EF=BB=BF<span>Dear Saso,</span><br><span></span><br><span>We&#39;=
ve added provisional URI scheme &quot;cttps&quot; to the registry:</span><b=
r><span></span><br><span><a href=3D"https://www.iana.org/assignments/uri-sc=
hemes/prov/cttps" target=3D"_blank">https://www.iana.org/assignments/uri-sc=
hemes/prov/cttps</a></span><br><span></span><br><span>Registry: <a href=3D"=
https://www.iana.org/assignments/uri-schemes" target=3D"_blank">https://www=
.iana.org/assignments/uri-schemes</a></span><br><span></span><br><span>Per =
the designated expert for URI Schemes registry, we&#39;re also notifying th=
e <a href=3D"mailto:[email protected]" target=3D"_blank">uri-review@ietf.=
org</a> mailing list that this provisional registration has been completed.=
</span><br><span></span><br><span>Best regards,</span><br><span></span><br>=
<span>Sabrina Tanamal</span><br><span>IANA</span><br><span></span><br><span=
>_______________________________________________</span><br><span>Uri-review=
 mailing list -- <a href=3D"mailto:[email protected]" target=3D"_blank">u=
[email protected]</a></span><br><span>To unsubscribe send an email to <a h=
ref=3D"mailto:[email protected]" target=3D"_blank">uri-review-leave=
@ietf.org</a></span><br></div></blockquote></div>__________________________=
_____________________<br>
saag mailing list -- <a href=3D"mailto:[email protected]" target=3D"_blank">saa=
[email protected]</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]" targ=
et=3D"_blank">[email protected]</a><br>
</blockquote></div></div>

--0000000000001d09600651ad2bf4--


--===============7077578970014574872==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18Kc2FhZyBtYWls
aW5nIGxpc3QgLS0gc2FhZ0BpZXRmLm9yZwpUbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRv
IHNhYWctbGVhdmVAaWV0Zi5vcmcK

--===============7077578970014574872==--