IMPP WG J. Peterson
Internet-Draft NeuStar
Expires: February 12, 2004 August 14, 2003
Common Profile for Instant Messaging (CPIM)
draft-ietf-impp-im-04
Status of this Memo
This document is an Internet-Draft and is in full conformance with
all provisions of Section 10 of RFC2026.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF), its areas, and its working groups. Note that
other groups may also distribute working documents as Internet-
Drafts.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
The list of current Internet-Drafts can be accessed at http://
www.ietf.org/ietf/1id-abstracts.txt.
The list of Internet-Draft Shadow Directories can be accessed at
http://www.ietf.org/shadow.html.
This Internet-Draft will expire on February 12, 2004.
Copyright Notice
Copyright (C) The Internet Society (2003). All Rights Reserved.
Abstract
At the time this document was written, numerous instant messaging
protocols are in use, and little interoperability between services
based on these protocols has been achieved. This specification
defines common semantics and data formats for instant messaging to
facilitate the creation of gateways between instant messaging
services.
Peterson Expires February 12, 2004 [Page 1]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3
2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . 3
3. Abstract Instant Messaging Service . . . . . . . . . . . . . 4
3.1 Overview of Instant Messaging Service . . . . . . . . . . . 4
3.2 Identification of INSTANT INBOXes . . . . . . . . . . . . . 5
3.2.1 Address Resolution . . . . . . . . . . . . . . . . . . . . . 5
3.3 Format of Instant Messages . . . . . . . . . . . . . . . . . 5
3.4 The Messaging Service . . . . . . . . . . . . . . . . . . . 6
3.4.1 The Message Operation . . . . . . . . . . . . . . . . . . . 6
3.4.2 Looping . . . . . . . . . . . . . . . . . . . . . . . . . . 7
4. Security Considerations . . . . . . . . . . . . . . . . . . 7
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . 8
5.1 The IM URI Scheme . . . . . . . . . . . . . . . . . . . . . 8
6. Contributors . . . . . . . . . . . . . . . . . . . . . . . . 8
Author's Address . . . . . . . . . . . . . . . . . . . . . . 10
A. IM URI IANA Registration Template . . . . . . . . . . . . . 10
A.1 URI scheme name . . . . . . . . . . . . . . . . . . . . . . 10
A.2 URI scheme syntax . . . . . . . . . . . . . . . . . . . . . 10
A.3 Character encoding considerations . . . . . . . . . . . . . 10
A.4 Intended usage . . . . . . . . . . . . . . . . . . . . . . . 10
A.5 Applications and/or protocols which use this URI scheme
name . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
A.6 Security considerations . . . . . . . . . . . . . . . . . . 11
A.7 Relevant publications . . . . . . . . . . . . . . . . . . . 11
A.8 Person & email address to contact for further information . 11
A.9 Author/Change controller . . . . . . . . . . . . . . . . . . 11
A.10 Applications and/or protocols which use this URI scheme
name . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
B. Issues of Interest . . . . . . . . . . . . . . . . . . . . . 11
B.1 Address Mapping . . . . . . . . . . . . . . . . . . . . . . 11
B.2 Source-Route Mapping . . . . . . . . . . . . . . . . . . . . 11
Normative References . . . . . . . . . . . . . . . . . . . . 9
Informative References . . . . . . . . . . . . . . . . . . . 9
C. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . 12
Full Copyright Statement . . . . . . . . . . . . . . . . . . 13
Peterson Expires February 12, 2004 [Page 2]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
1. Introduction
Instant messaging is defined in RFC2778 [5]. At the time this
document was written, numerous instant messaging protocols are in
use, and little interoperability between services based on these
protocols has been achieved. This specification defines semantics
and data formats for common services of instant messaging to
facilitate the creation of gateways between instant messaging
services: a common profile for instant messaging (CPIM).
Service behavior is described abstractly in terms of operations
invoked between the consumer and provider of a service. Accordingly,
each IM service must specify how this behavior is mapped onto its own
protocol interactions. The choice of strategy is a local matter,
providing that there is a clear relation between the abstract
behaviors of the service (as specified in this memo) and how it is
faithfully realized by a particular instant messaging service. For
example, one strategy might transmit an instant message as textual
key/value pairs, another might use a compact binary representation,
and a third might use nested containers.
The attributes for each operation are defined using an abstract
syntax. Although the syntax specifies the range of possible data
values, each IM service must specify how well-formed instances of the
abstract representation are encoded as a concrete series of bits.
In order to provide a means for the preservation of end-to-end
features (especially security) to pass through instant messaging
interoperability gateways, this specification also provides
recommendations for instant messaging document formats that could be
employed by instant messaging protocols.
2. Terminology
In this document, the key words "MUST", "MUST NOT", "REQUIRED",
"SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT
RECOMMENDED", "MAY", and "OPTIONAL" are to be interpreted as
described in RFC2119 [1] and indicate requirement levels for
compliant implementations.
This memos makes use of the vocabulary defined in RFC2778 [5]. Terms
such as CLOSED, INSTANT INBOX, INSTANT MESSAGE, and OPEN are used in
the same meaning as defined therein.
The term 'gateway' used in this draft denotes a network element
responsible for interworking between diverse instant messaging
protocols. Although the instant messaging protocols themselves are
diverse, under the model used in this document these protocols can
Peterson Expires February 12, 2004 [Page 3]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
carry a common payload that is relayed by the gateway. Whether these
interworking intermediaries should be called 'gateways' or 'relays'
is therefore somewhat debatable; for the purposes of this document,
they are called 'CPIM gateways'.
The term 'instant messaging service' also derives from RFC2778, but
its meaning changes slightly due to the existence of gateways in the
CPIM model. When a client sends an operation to an instant messaging
service, that service might either be an endpoint or an intermediary
such as a CPIM gateway - in fact, the client should not have to be
aware which it is addressing, as responses from either will appear
the same.
This document defines operations and attributes of an abstract
instant messaging protocol. In order for a compliant protocol to
interface with an instant messaging gateway, it must support all of
the operations described in this document (i.e. the instant
messaging protocol must have some message or capability that provides
the function described by each of the given operations). Similarly,
the attributes defined for these operations must correspond to
information available in the instant messaging protocol in order for
the protocol to interface with gateways defined by this
specification. Note that these attributes provide only the minimum
possible information that needs to be specified for interoperability
- the functions in an instant messaging protocol that correspond to
the operations described in this document can contain additional
information that will not be mapped by CPIM.
3. Abstract Instant Messaging Service
3.1 Overview of Instant Messaging Service
When an application wants to send a message to an INSTANT INBOX, it
invokes the message operation, e.g.,
+-------+ +-------+
| | | |
| appl. | -- message ------> | IM |
| | | svc. |
+-------+ +-------+
The message operation has the following attributes: source,
destination, MaxForwards and TransID. 'source' and 'destination'
identify the originator and recipient of an instant message,
respectively, and consist of an INSTANT INBOX identifier (as
described in Section 3.2). The MaxForwards is a hop counter to avoid
Peterson Expires February 12, 2004 [Page 4]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
loops through gateways, with usage detailed defined in Section 3.4.2;
its initial value is set by the originator. The TransID is a unique
identifier used to correlate message operations to response
operations; gateways should be capable of handling TransIDs up to 40
bytes in length.
The message operation also has some content, the instant message
itself, which may be textual, or which may consist of other data.
Content details are specified in Section 3.3.
Note that this specification assumes that instant messaging protocols
provide reliable message delivery; there are no application-layer
message delivery assurance provisions in this specification.
Upon receiving a message operation, the service immediately responds
by invoking the response operation containing the same transaction-
identifier, e.g.,
+-------+ +-------+
| | | |
| appl. | <----- response -- | IM |
| | | svc. |
+-------+ +-------+
The response operation contains the following attributes: TransID and
status. The TransID is used to correlate the response to a
particular instant message. Status indicates whether the delivery of
the message succeeded or failed. Valid status values are described
in Section 3.4.1.
3.2 Identification of INSTANT INBOXes
An INSTANT INBOX is specified using an instant messaging URI with the
'im:' URI scheme. The full syntax of the IM URI scheme is given in
Appendix A. An example would be: "im:fred@example.com"
3.2.1 Address Resolution
An IM service client determines the next hop to forward the IM to by
resolving the domain name portion of the service destination.
Compliant implementations SHOULD follow the guidelines for
dereferencing URIs given in [2].
3.3 Format of Instant Messages
This specification defines an abstract interoperability mechanism for
instant messaging protocols; the message content definition given
Peterson Expires February 12, 2004 [Page 5]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
here pertains to semantics rather than syntax. However, some
important properties for interoperability can only be provided if a
common end-to-end format for instant messaging is employed by the
interoperating instant messaging protocols, especially with respect
to security. In order to maintain end-to-end security properties,
applications that send message operations to a CPIM gateway MUST
implement the format defined in MSGFMT [4]. Applications MAY support
other content formats.
CPIM gateways MUST be capable of relaying the content of a message
operation between supported instant messaging protocols without
needing to modify or inspect the content.
3.4 The Messaging Service
3.4.1 The Message Operation
When an application wants to send an INSTANT MESSAGE, it invokes the
message operation.
When an instant messaging service receives the message operation, it
performs the following preliminary checks:
1. If the source or destination does not refer to a syntactically
valid INSTANT INBOX, a response operation having status "failure"
is invoked.
2. If the destination of the operation cannot be resolved by the
recipient, and the recipient is not the final recipient, a
response operation with the status "failure" is invoked.
3. If access control does not permit the application to request this
operation, a response operation having status "failure" is
invoked.
4. Provided these checks are successful:
If the instant messaging service is able to successfully
deliver the message, a response operation having status
"success" is invoked.
If the service is unable to successfully deliver the message,
a response operation having status "failure" is invoked.
If the service must delegate responsibility for delivery (i.e.
if it is acting as a gateway or proxying the operation), and
if the delegation will not result in a future authoritative
indication to the service, a response operation having status
Peterson Expires February 12, 2004 [Page 6]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
"indeterminant" is invoked.
If the service must delegate responsibility for delivery, and
if the delegation will result in a future authoritative
indication to the service, then a response operation is
invoked immediately after the indication is received.
When the service invokes the response operation, the transID
parameter is identical to the value found in the message operation
invoked by the application.
3.4.2 Looping
The dynamic routing of instant messages can result in looping of a
message through a relay. Detection of loops is not always obvious,
since aliasing and group list expansions can legitimately cause a
message to pass through a relay more than one time.
This document assumes that instant messaging protocols that can be
gatewayed by CPIM support some semantic equivalent to an integer
value that indicates the maximum number of hops through which a
message can pass. When that number of hops has been reached, the
message is assumed to have looped.
When a CPIM gateway relays an instant message, it decrements the
value of the MaxForwards attribute. This document does not mandate
any particular initial setting for the MaxForwards element in instant
messaging protocols, but it is recommended that the value be
reasonably large (over one hundred).
If a CPIM gateway receives an instant message operation that has a
MaxForwards attribute of 0, it discards the message and invokes a
failure operation.
4. Security Considerations
Detailed security considerations for instant messaging protocols are
given in RFC2779 (in particular, requirements are given in section
5.4 and some motivating discussion with 8.1).
CPIM defines an interoperability function that is employed by
gateways between instant messaging protocols. CPIM gateways MUST be
compliant with the minimum security requirements of the instant
messaging protocols with which they interface.
The introduction of gateways to the security model of instant
messaging in RFC2779 also introduces some new risks. End-to-end
security properties (especially confidentiality and integrity)
Peterson Expires February 12, 2004 [Page 7]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
between instant messaging user agents that interface through a CPIM
gateway can only be provided if a common instant message format (such
as the format described in MSGFMT [4]) is supported by the protocols
interfacing with the CPIM gateway.
When end-to-end security is required, the message operation MUST use
MSGFMT, and MUST secure the MSGFMT MIME body with S/MIME [8], with
encryption (CMS EnvelopeData) and/or S/MIME signatures (CMS
SignedData).
The S/MIME algorithms are set by CMS [9]. The AES [10] algorithm
should be preferred, as it is expected that AES best suits the
capabilities of many platforms. Implementations MAY use AES as an
encryption algorithm, but are REQUIRED to support only the baseline
algorithms mandated by S/MIME and CMS.
When IM URIs are placed in instant messaging protocols, they convey
the identity of the sender and/or the recipient. Certificates that
are used for S/MIME IM operations SHOULD, for the purposes of
reference integrity, contain a subjectAltName field containing the IM
URI of their subject. Note that such certificates may also contain
other identifiers, including those specific to particular instant
messaging protocols. In order to further facilitate interoperability
of secure messaging through CPIM gateways, users and service
providers are encouraged to employ trust anchors for certificates
that are widely accepted rather than trust anchors specific to any
particular instant messaging service or provider.
In some cases, anonymous messaging may be desired. Such a capability
is beyond the scope of this specification.
5. IANA Considerations
The IANA assigns the "im" scheme.
5.1 The IM URI Scheme
The Instant Messaging (IM) URI scheme designates an Internet
resource, namely an INSTANT INBOX.
The syntax of an IM URI is given in Appendix A.
6. Contributors
Dave Crocker edited earlier versions of this document.
The following individuals made substantial textual contributions to
this document:
Peterson Expires February 12, 2004 [Page 8]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
Athanassios Diacakis (thanos.diacakis@openwave.com)
Florencio Mazzoldi (flo@networkprojects.com)
Christian Huitema (huitema@microsoft.com)
Graham Klyne (gk@ninebynine.org)
Jonathan Rosenberg (jdrosen@dynamicsoft.com)
Robert Sparks (rsparks@dynamicsoft.com)
Hiroyasu Sugano (suga@flab.fujitsu.co.jp)
Normative References
[1] Bradner, S., "Key words for use in RFCs to indicate requirement
levels", RFC 2119, March 1997.
[2] Crocker, D. and J. Peterson, "Address resolution for Instant
Messaging and Presence", draft-ietf-impp-srv-02 (work in
progress), February 2003.
[3] Resnick, P., "Internet Message Format", RFC 2822, STD 11, April
2001.
[4] Atkins, D. and G. Klyne, "Common Presence and Instant Messaging:
Message Format", draft-ietf-impp-cpim-msgfmt-08 (work in
progress), January 2003.
[5] Day, M., Rosenberg, J. and H. Sugano, "A Model for Presence and
Instant Messaging", RFC 2778, February 2000.
[6] Day, M., Aggarwal, S. and J. Vincent, "Instant Messaging /
Presence Protocol Requirements", RFC 2779, February 2000.
[7] Allocchio, C., "GSTN Address Element Extensions in Email
Services", RFC 2846, June 2000.
[8] Ramsdell, B., "S/MIME Version 3 Message Specification", draft-
ietf-smime-rfc2633bis-03 (work in progress), January 2003.
[9] Housley, R., "Cryptographic Message Syntax", RFC 3369, August
2002.
Informative References
[10] Schaad, J., "Use of the Advanced Encryption Standard (AES)
Peterson Expires February 12, 2004 [Page 9]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
Encryption Algorithm and in Cryptographic Message Syntax
(CMS)", RFC 3565, July 2003.
Author's Address
Jon Peterson
NeuStar, Inc.
1800 Sutter St
Suite 570
Concord, CA 94520
US
Phone: +1 925/363-8720
EMail: jon.peterson@neustar.biz
Appendix A. IM URI IANA Registration Template
This section provides the information to register the im: instant
messaging URI.
A.1 URI scheme name
im
A.2 URI scheme syntax
The syntax follows the existing mailto: URI syntax specified in
RFC2368. The ABNF is:
IM-URI = "im:" [ to ] [ headers ]
to = mailbox
headers = "?" header *( "&" header )
header = hname "=" hvalue
hname = *urlc
hvalue = *urlc
A.3 Character encoding considerations
Representation of non-ASCII character sets in local-part strings is
limited to the standard methods provided as extensions to RFC2822
[3].
A.4 Intended usage
Use of the im: URI follows closely usage of the mailto: URI. That
is, invocation of an IM URI will cause the user's instant messaging
Peterson Expires February 12, 2004 [Page 10]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
application to start, with destination address and message headers
fill-in according to the information supplied in the URI.
A.5 Applications and/or protocols which use this URI scheme name
It is anticipated that protocols compliant with RFC2779, and meeting
the interoperability requirements specified here, will make use of
this URI scheme name.
A.6 Security considerations
See Section 4.
A.7 Relevant publications
RFC2779, RFC2778
A.8 Person & email address to contact for further information
Jon Peterson [mailto:jon.peterson@neustar.biz]
A.9 Author/Change controller
This scheme is registered under the IETF tree. As such, IETF
maintains change control.
A.10 Applications and/or protocols which use this URI scheme name
Instant messaging service
Appendix B. Issues of Interest
This appendix briefly discusses issues that may be of interest when
designing an interoperation gateway.
B.1 Address Mapping
When mapping the service described in this memo, mappings that place
special information into the im: address local-part MUST use the
meta-syntax defined in RFC2846 [7].
B.2 Source-Route Mapping
The easiest mapping technique is a form of source- routing and
usually is the least friendly to humans having to type the string.
Source-routing also has a history of operational problems.
Use of source-routing for exchanges between different services is by
Peterson Expires February 12, 2004 [Page 11]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
a transformation that places the entire, original address string into
the im: address local part and names the gateway in the domain part.
For example, if the destination INSTANT INBOX is "pepp://example.com/
fred", then, after performing the necessary character conversions,
the resulting mapping is:
im:pepp=example.com/fred@relay-domain
where "relay-domain" is derived from local configuration information.
Experience shows that it is vastly preferable to hide this mapping
from end-users - if possible, the underlying software should perform
the mapping automatically.
Appendix C. Acknowledgments
The authors would like to acknowledge John Ramsdell for his comments,
suggestions and enthusiasm. Thanks to Derek Atkins for editorial
fixes.
Peterson Expires February 12, 2004 [Page 12]
Internet-Draft Common Profile for Instant Messaging (CPIM)August 2003
Full Copyright Statement
Copyright (C) The Internet Society (2003). All Rights Reserved.
This document and translations of it may be copied and furnished to
others, and derivative works that comment on or otherwise explain it
or assist in its implementation may be prepared, copied, published
and distributed, in whole or in part, without restriction of any
kind, provided that the above copyright notice and this paragraph are
included on all such copies and derivative works. However, this
document itself may not be modified in any way, such as by removing
the copyright notice or references to the Internet Society or other
Internet organizations, except as needed for the purpose of
developing Internet standards in which case the procedures for
copyrights defined in the Internet Standards process must be
followed, or as required to translate it into languages other than
English.
The limited permissions granted above are perpetual and will not be
revoked by the Internet Society or its successors or assigns.
This document and the information contained herein is provided on an
"AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Acknowledgement
Funding for the RFC Editor function is currently provided by the
Internet Society.
Peterson Expires February 12, 2004 [Page 13]
