[saag] Re: Fwd: [Uri-review] [IANA #1449893] Registration of URI scheme 'cttps'

[Deb Cooley <[e-mail]>]

To answer the question asked:
It is impossible to separate security merits from a protocol such as
TLS/SSL.  In this case, as has been stated, the protocol being
provisionally registered has many vulnerabilities.  I certainly hope that
there is little uptake.

Deb Cooley
Sec AD

On Tue, May 12, 2026 at 8:29 AM Graham Klyne <[e-mail]> wrote:

> I’m forwarding this for information, as I’m not sure if anyone in security
> area would otherwise be aware of this.
>
> Provisional URI schemes are registered FCFS, without review, so there’s no
> IETF-approved action here, but it feels to me a bit like a new generic
> security transport being packaged as a web protocol.  I wonder if such an
> initiative, regardless of its security merits, should be a TLS/SSL option
> rather than a new protocol scheme?  I don’t know enough about security
> protocols to judge.
>

> #g
>
> (Mark Baker cc’ed for information as current URI scheme reviewer.)
>
>
> Sent from my iPhone
>
> Begin forwarded message:
>
> *From:* Sabrina Tanamal via RT <[e-mail]>
> *Date:* 12 May 2026 at 01:10:45 BST
> *To:* [e-mail]
> *Cc:* [e-mail]
> *Subject:* *[Uri-review] [IANA #1449893] Registration of URI scheme
> 'cttps'*
> *Reply-To:* [e-mail]
>
> Dear Saso,
>
> We've added provisional URI scheme "cttps" to the registry:
>
> https://www.iana.org/assignments/uri-schemes/prov/cttps
>
> Registry: https://www.iana.org/assignments/uri-schemes
>
> Per the designated expert for URI Schemes registry, we're also notifying
> the [e-mail] mailing list that this provisional registration
> has been completed.
>
> Best regards,
>
> Sabrina Tanamal
> IANA
>
> _______________________________________________
> Uri-review mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>
> _______________________________________________
> saag mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>