[art] Re: [SPICE] Re: Re: [Last-Call] Re: Re: Re: draft-ietf-spice-glue-id-04 ietf last call Artart review

Orie <orie@or13.io> Fri, 13 February 2026 13:50 UTC

Return-Path: <orie@or13.io>
X-Original-To: spice@mail2.ietf.org
Delivered-To: spice@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C4422B6EEF79 for <spice@mail2.ietf.org>; Fri, 13 Feb 2026 05:50:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=or13.io
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XrAPYplEs-dg for <spice@mail2.ietf.org>; Fri, 13 Feb 2026 05:50:55 -0800 (PST)
Received: from mail-vk1-xa2c.google.com (mail-vk1-xa2c.google.com [IPv6:2607:f8b0:4864:20::a2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id DE7A8B6EEF5D for <spice@ietf.org>; Fri, 13 Feb 2026 05:50:55 -0800 (PST)
Received: by mail-vk1-xa2c.google.com with SMTP id 71dfb90a1353d-567417610ddso781136e0c.2 for <spice@ietf.org>; Fri, 13 Feb 2026 05:50:55 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1770990655; cv=none; d=google.com; s=arc-20240605; b=c+odBzsWcvkQc+fXYk1099PMpbplDGxOyw/Svts3JW3Gy+qsybwQpEH3Uet1pKIkYC Lc2lo+GZCSeMxsfA6Xc8d5BpEFV+OqZaIJqotkYckBGBUp7F+WJae7Hy8BAjIB/y3Iae gI9NT5N4I/tG3sL8WJu285oXRKOC4ncNs32feOjq2tf6AZvolhBnqSzaCDBN/1/BHnbQ h06tPE75/7rt2Uonk1fUHZeGG0YgUjRd/TBEn4jXV2b861dRDcGR7yqS7tYMbIV/a49E Thzi0I0v33dDqa09y/lbzlW2acveWCsQFyLaQ37LQh3hpPRaDNsVDxRRb/df30thhiXP MoMg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=mfbCOAnfcS8CuEhmD+D/U4l4mI1CEl0irlzLUd+UWlo=; fh=c19tlMQ+e6hohXeSndO6lT9UvGeap0dny1heSXQYHQI=; b=Jka2HRmmD6c4yemIlcyMKdh3md63vnxF3SdQaGgastvVg0oXNS1JSCEY0O+IoYJ8GU Q9JEriVir5YNA6/DXUG7HoGTrsDqWXmG1oxDGz8xB201eud33EHgKaw071U+HIBNS4u9 7FI1cByDPDrXZsNgNfIsBtL9AOkQEQT7PBElpqbERbniXf7hAgool2ZUURuWQLOfbhIf RpWFWr+MfMtYRkXdype8qzWtmxJeHgrdrvSWmqCWmRW2yb2XEowaLCz/gxrn9PwqnpBh dRoqUtfoaXDEB/XdQQWwZdxd7xA4tMTEXEwNqc/cQIXyRdvAXSM/hzPjb82nucs1CQkn Vk+Q==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=or13.io; s=google; t=1770990655; x=1771595455; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=mfbCOAnfcS8CuEhmD+D/U4l4mI1CEl0irlzLUd+UWlo=; b=NRfJJ+VoqAh6VUc20ur1tIMWjr0utOcvGDmgLhJMJNFtKA024aTXtaAAsim/RKw/pB 2xClLTwjUmMqCdpBhCcYTEVDQlyw8kGT9okr/4gPriOTUwznxxKotS9f51h66TdYI4u1 lEBCKPkmLg61AnsXaONGEgzEXSVlPsGCvXlInA6VyG/UuXT2OsROfoTPeOITs5T/M9io gs7KNK5qVdREv2CXdkd5BoVsJd7ldQ+pzpaJLeA6aK4seVT3jq3ItOg6I7OC19120Ox3 0bF0jWLyBBK0lEE03yduFx99yWU0Ux+sh3Fho7fxhLg4nlsXLcCHoUgQ5fNXA/DrmDX2 KUJQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1770990655; x=1771595455; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=mfbCOAnfcS8CuEhmD+D/U4l4mI1CEl0irlzLUd+UWlo=; b=HRt/1lF6+isqn0ibkH3Arfh4lRHOzedO2X1oVAhol+vNfE4KFN2EGk37E6n1rIP9AU QymfuBNGB57HQ1lF9VbiCMdGFh5eht9Ql+qjwUIeK3MuaLQN38YY77pL7vTc6I9zMHd2 rt0hsy9dp4m54hoMV4i08XXQCE6/7iD5Vtvqez+x5karnUssmVpkPEFcgpuCwIR9ALfD /zaT1mzwJ2itKTVmUfwLvqkRG3sArqtbMadURNgP/as+XOYUDym1mVpUGEcfyHIuVzyM fDWKzur9pdK/V1NUszoApDPxv1WrAnEtEceCeE2xhMo+stEGLlrEVCxnKslZOuzuQORg vbEg==
X-Forwarded-Encrypted: i=1; AJvYcCUAgHrTlrjsI0JRwryK6kGG1fGpYbRAiS0KFh4spZTMOY0AOtsH8vnwIKCR9s3x1967NQc0ag==@ietf.org
X-Gm-Message-State: AOJu0YzG4cHfiQcwlt/VtjXlbhLDzkg9lyunYGiCbdWa5zL6flW/6YX4 QKIYnoJDN2NwgqQgeLWFGpDyaFljvWGCAi3/PKq/62LBSlI1dGyVCSrVbb+mIRo4bZshFTsCq3G RII4rmfI9+s0SwXsDGO0EIKoZS7jo+fOMBxckHzUkzxZUoouAHh0vq1I=
X-Gm-Gg: AZuq6aIk9szywhuSDEYuuZ7uxPQsXeJo0dS/f2Orq56jEGcAQCiWQcN4MXuydXLcVLq NrAJaPZjWD0wJqnz9cpHiGSwF6tAUiXSQ+GHxq5hdA6+CIhVDAIz22YrVLsP3bFKP1VGPDn0fv8 ww24PT0TlLU87KbgT340zNeERDPaIGmUGlXDAbwxxX16ralRFO0zWBWb5gHREvh2pqXH77PbM8I 43mGkPSw4YvssujsLLo14MkuU08eZ5jrcX/93Ljn7QWlhNf8vHFB0YyqyBcMLfEmotKKt1Qsw8Q Cvyw4n6ySNc7617usDs=
X-Received: by 2002:a05:6102:e0b:b0:5fd:a537:a777 with SMTP id ada2fe7eead31-5fe1acd55a1mr574959137.10.1770990654917; Fri, 13 Feb 2026 05:50:54 -0800 (PST)
MIME-Version: 1.0
References: <CAP5QTG5-hGWm1_u7CZTJW5H56LxXecoKbk3viBfBPdoDOxozhA@mail.gmail.com> <CAHBU6itnZa3VDE=_zWsMeDJ8CuieWvdyzvQS51BhcPqG8Fz07Q@mail.gmail.com> <CAKoiRubs9ZUO=kbvOgvgruaqiBusyvv_BqO0_kkah2SokjRcmw@mail.gmail.com> <4C4C41E0-9D36-4A10-AEE4-D94C8B319485@paftech.se> <CAKoiRub+QYyMFE=jMTvNc+FDn-YFiBdM7jC5da64HyvmXyx3Dg@mail.gmail.com> <62A41349908B128EDD6AA331@PSB> <794B84A2-9042-4B7A-815B-42AE37DF336F@paftech.se> <CAKoiRua9S+70bstKRBpGxnibhQA+W2LbpKVrHrpaZ+cBbVV8bQ@mail.gmail.com> <8EDB82ABFD21D1AA4A774242@PSB> <87ldgx54ti.fsf@libertango.gulbrandsen.priv.no>
In-Reply-To: <87ldgx54ti.fsf@libertango.gulbrandsen.priv.no>
From: Orie <orie@or13.io>
X-Gm-Features: AZwV_QjE_XcM5JUueHtU0UhXi8loqXvR4yFglqRMPuA9sBcfahd622c9S6E4eL4
Message-ID: <CAMzqgox4mHcVuWmkXZwDnOmWN5LcXf=PpgHoG0g0TVmbWUt=0Q@mail.gmail.com>
To: Arnt Gulbrandsen <arnt@gulbrandsen.priv.no>
Content-Type: multipart/alternative; boundary="000000000000e31e07064ab4e434"
X-MailFrom: orie@or13.io
X-Mailman-Rule-Hits: max-recipients
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-size; news-moderation; no-subject; digests; suspicious-header
Message-ID-Hash: T7N7LOX6DKDR2MIZIGUATRPMNRKGLXFA
X-Message-ID-Hash: T7N7LOX6DKDR2MIZIGUATRPMNRKGLXFA
X-Mailman-Approved-At: Thu, 19 Feb 2026 12:45:05 -0800
CC: John C Klensin <john-ietf@jck.com>, Rohan Mahy <rohan.mahy@gmail.com>, Patrik Fältström <paf@paftech.se>, Tim Bray <tbray@textuality.com>, Brent Zundel <brent.zundel=40yubico.com@dmarc.ietf.org>, art@ietf.org, draft-ietf-spice-glue-id.all@ietf.org, last-call@ietf.org, spice@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [art] Re: [SPICE] Re: Re: [Last-Call] Re: Re: Re: draft-ietf-spice-glue-id-04 ietf last call Artart review
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/t5R1n-UL2sMIgy8gstTU3ecRAn0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Owner: <mailto:art-owner@ietf.org>
List-Post: <mailto:art@ietf.org>
List-Subscribe: <mailto:art-join@ietf.org>
List-Unsubscribe: <mailto:art-leave@ietf.org>
Date: Fri, 13 Feb 2026 13:50:59 -0000
X-Original-Date: Fri, 13 Feb 2026 07:50:43 -0600

Hi all,

It's great to see so many comments on this draft : )

I am wondering if anyone is aware of any global business or legal entity
identifier systems which are not based on US ASCII ?

I don't think the IETF should specify a business identifier system that
supports more than US ASCII without a compelling example of one in the wild.

I had gemini do a little research and the only one that showed up was our
old friend IDNs : )

BEGIN RESPONSE FROM GEMINI

There are currently no major *global* business identifier standards where
the **identifier code itself** uses non-Latin (non-ASCII) characters.

If a business in Tokyo, Cairo, or Beijing gets a global identifier, that
code will almost certainly consist of **Latin letters (A-Z)** and **Arabic
numerals (0-9)**.

The reason is **interoperability**. Global financial infrastructure (like
SWIFT networks, customs databases, and stock exchanges) relies on legacy
systems that cannot reliably process characters like "Д", "Φ", or "中" in
the identifier field without risking data corruption or transaction failure.

However, there is a major distinction between the **Identifier Code** (the
tag) and the **Entity Data** (the content).

### 1. The Code vs. The Data

While the ID *code* is almost always ASCII, the *records* attached to that
ID increasingly support local scripts.

| Identifier | The Code (ASCII/Latin) | The Data Record (Unicode) |
| --- | --- | --- |
| **LEI** (Legal Entity Identifier) | `5493000IBP32UCZ95H59` | Can store
the company name as **腾讯** (Tencent) or **БАНК** (Bank). |
| **SWIFT / BIC** | `KOEXKRSE` | The bank's name and address can be stored
in local character sets in modern registries. |
| **USCC** (China) | `91110000710925462X` | Even China's national standard
uses Latin letters and numbers for the code itself to ensure it works with
Western software. |

### 2. The "Language-Neutral" Approach (Numeric IDs)

To avoid the bias of the Latin alphabet, many global standards rely
strictly on **numbers**. While these are technically "ASCII digits" (0-9)
in computer systems, they are considered culturally neutral because they
don't require knowledge of the English alphabet to transcribe.

* **DUNS Number:** A unique 9-digit code (e.g., `12-345-6789`). It contains
no letters, making it usable by anyone who reads Arabic numerals.
* **GLN (Global Location Number):** A 13-digit number used in logistics
(GS1 standard).

### 3. The One Exception: Internationalized Domain Names (IDNs)

The only widely used "business identifier" that allows non-ASCII characters
is the **Internet Domain Name**.

If you consider a website address a business identifier (which it
effectively is in digital commerce), this is the only place where non-Latin
scripts are standard.

* **Example:** `http://见.香港 <http://xn--6x2a.xn--j6w193g>` (A domain ending
in .HongKong)
* **Example:** `http://сбербанк.рф <http://xn--80abap1arsf.xn--p1ai>`
(Sberbank in Russia)

### Why doesn't a "Unicode Business ID" exist?

Technically, we *could* create a business ID that uses Chinese or Arabic
characters today. We don't do it because of **the keyboard problem**.

If a German customs agent needs to input the ID of a Thai supplier, they
cannot type `บริษัท` on a German keyboard. If the ID is alphanumeric
(`TH-12345`), they can type it instantly. Until input methods become
universally seamless, global identifiers will likely remain stuck in the
Latin alphabet.

### Summary Table of Global IDs

| Identifier | Full Name | Character Set | Status |
| --- | --- | --- | --- |
| **LEI** | Legal Entity Identifier | **ISO 17442** (Latin + Numbers) | The
"Gold Standard" for global finance. |
| **USCC** | Unified Social Credit Code | **GB 32100** (Latin + Numbers) |
China's standard. notably uses Latin letters. |
| **DUNS** | Data Universal Numbering System | **Numeric** (0-9) | Private
standard, widely used in US/UK supply chains. |
| **EORI** | Economic Operators Registration | **Alphanumeric** (Latin +
Numbers) | Used for customs in the EU. |


On Fri, Feb 13, 2026 at 4:14 AM Arnt Gulbrandsen <arnt@gulbrandsen.priv.no>
wrote:

> Thanks, Patrik and John.
>
> John C Klensin <john-ietf@jck.com> writes:
> > However, I think that what Patrik and I are saying in different
> > ways is that, if you start by specifying syntax, rather than
> > having the WG understand the issues involved, including the
> > decisions that need to be made, and having at least preliminary
> > draft text to deal with them, you just specify syntax, you
> > invite a world of pain and hurt.
>
> Please please please don't start with syntax.
>
> > That is especially important since there may be interactions
> > between substantive choices and optimal choices of encoding
> > systems (and hence syntax).   Even if you say "just do what RFC
> > 3987 IRIs do", that raises other issues, starting with whether
> > that is really the best spec to cite for (if I understand the
> > intent of the SPICE work correctly) in the definition of a URN
> > namespace.  So I am suggesting that the order of events/
> > consideration should be:
> >
> > (1) Decide whether non-ASCII identifiers are going to be
> > allowed.  If not, preferentially explain why and incorporate the
> > explanation in the document.  If so...
>
> At a quick glance, all of the current identifier authorities
> appear to use arabic digits. It's not obvious to me that even the
> full ASCII range is required. But if ASCII letters are required, I
> suspect that the same argument will apply to other letters.
>
> > And, unfortunately, Patrik and I both have scars from attempts
> > to do this in other ways, including "syntax first, rules and
> > semantics later" approaches.  So do many others around the IETF.
> > Let's not make that mistake again.
>
> Yes yes yes yes yes.
>
> Arnt
>
> --
> SPICE mailing list -- spice@ietf.org
> To unsubscribe send an email to spice-leave@ietf.org
>