Network Working Group                                            E. Lear
Internet-Draft                                        Cisco Systems GmbH
Intended status: BCP                                           P. Eggert
Expires: November 20, 2011                                          UCLA
                                                            May 19, 2011


         IANA Procedures for Maintaining the Timezone Database
                  draft-lear-iana-timezone-database-04

Abstract

   Timezone information serves as a basic protocol element in protocols,
   such as the calendaring suite and DHCP.  The Timezone (TZ) Database
   specifies the indices used in various protocols, as well as their
   semantic meanings, for all localities throughout the world.  This
   database has been meticulously maintained and distributed free of
   charge by a group of volunteers, coordinated by a single volunteer
   who is now planning to retire.  This memo specifies IANA procedures
   involved with maintenance of the TZ database and associated code,
   including how to submit proposed updates, how decisions for inclusion
   of those updates are made, and the selection of a designated expert
   BY AND FOR the timezone community.  The intent of this memo is, to
   the extent possible, document existing practice and provide a means
   to ease succession.

Status of this Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at http://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on November 20, 2011.

Copyright Notice

   Copyright (c) 2011 IETF Trust and the persons identified as the
   document authors.  All rights reserved.




Lear & Eggert           Expires November 20, 2011               [Page 1]


Internet-Draft      Maintaining the Timezone Database           May 2011


   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.


1.  Introduction

   The IETF has specified several standards that make use of timezone
   information.  Timezone names are used in DHCP to configure devices
   with correct local time [RFC4833].  Timezone names can appear in the
   TZID field of VEVENTs [RFC5545].  The normative reference for these
   values is the TZ Database [TZDB].  Since the early 1980s, that
   database, which has been in use on nearly all UNIX systems, Java
   systems, and other sorts of systems has been hosted at the National
   Institutes of Health.  The database consists of both historic and
   current entries for geographies throughout the world.  Associated
   with the database is a reference implementation of ISO/IEC 9899 C and
   IEEE 1003.1 POSIX time functions that can be used to convert time
   values.

   The database has been maintained by volunteers who participate in a
   mailing list [1] that is also hosted at the NIH.  The database itself
   is updated approximately twenty times per year, depending on the
   year, based on information these experts provide to the maintainer.
   Arthur David Olson has maintained the database, coordinated the
   mailing list, and provided a release platform since the database's
   inception.  With his retirement now approaching it is necessary to
   provide a means for this good work to continue.

   The IANA provides registry services to the Internet community.  Those
   registries are coordinated by technical experts who are designated by
   the Internet Engineering Steering Group (IESG).  The IANA is also
   well suited as a distribution platform for the TZ Database itself.

   The IANA has for quite some time had the capability to maintain
   designated expert mailing lists.  The TZ mailing list would fit
   nicely as just such a list.

1.1.  Terminology

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this



Lear & Eggert           Expires November 20, 2011               [Page 2]


Internet-Draft      Maintaining the Timezone Database           May 2011


   document are to be interpreted as described in RFC 2119 [RFC2119].

   TZ Database:  The TimeZone Database, sometimes referred to as the
      Olson Database.  This database consists of information about
      offsets from UTC for different localities, including daylight
      saving time (DST) transition information.
   TZ Coordinator:  The person or people who maintain and manage release
      of the TZ Database.  The TZ Coordinator also has responsibility
      for managing the TZ mailing list.  The TZ Coordinator is an IANA
      Designated Expert, as defined in Section 3.2 of [RFC5226], except
      as regards to appeals, as discussed in Section 5.  Roughly
      speaking, this means that the IESG will choose one or more experts
      to manage the TZ database, code, and mailing list.  The TZ
      Coordinator will also work with the IANA to develop appropriate
      service metrics.  There SHALL be a single lead individual and at
      least one backup individual for this function.
   TZ mailing list:  The forum where matters relating to the TZ database
      and supporting code are discussed.

   The rest of this document specifies the following:

   1.  Transferring and maintenance of the TZ mailing list;
   2.  Procedures for selecting a technical expert who will play the
       role of TZ Coordinator and release manager for the TZ database;
   3.  Procedures for updating the TZ database;
   4.  Maintenance and ownership of reference code; and
   5.  Ownership of the database.


2.  The TZ Mailing List

   For many years the TZ mailing list at the National Institutes of
   Health (NIH) has been the forum where discussion of changes to the TZ
   database and support files would take place.  In addition, the TZ
   mailing list is used to announce releases of the database.  Currently
   the TZ mailing list is administered by the TZ Coordinator.

   This list membership will be transitioned to the IANA mail server.
   The TZ Coordinator will continue to manage the list.  While the TZ
   Coordinator may establish other rules of governance for the list,
   members of that list will be informed that a condition of
   participating on the list is that all contributions to the list are
   released to the public domain, and that by placing their contribution
   in the public domain, contributors waive forever any intellectual
   property claims.

   The list will be used just as it has been: to learn of, discuss, and
   confirm TZ definition changes, as well as to serve as an announcement



Lear & Eggert           Expires November 20, 2011               [Page 3]


Internet-Draft      Maintaining the Timezone Database           May 2011


   list for new versions of the database.


3.  Making Updates to the TZ Database

   Updates to the TZ database are made by the TZ Coordinator in
   consultation with the TZ mailing list.  TZ Coordinator is empowered
   to decide, as the designated expert, appropriate changes, but SHOULD
   take into account views expressed on the mailing list.

   The TZ Coordinator will also decide the timing of database releases.
   The release itself today consists of several archive files that are
   downloaded from a well known location.

   Moving forward, the TZ database, supporting code, and any appropriate
   supporting information SHOULD be signed prior to release using well
   known public keys, along with any appropriate supporting information
   and distributed from a well known location that is advertised by IANA
   in a manner of its choosing.

   The criteria for updates to the database include the following:

   1.  New TZ names (e.g. locations) are only to be created when the
       scope of the region a name was envisioned to cover is no longer
       accurate.
   2.  In order to correct historical inaccuracies, a new TZ name MAY be
       added when it is necessary to indicate what was the consensus
       view at a given time and location.  Such TZ names are usually not
       added when the inaccuracy was prior to 1970.
   3.  Changes to existing entries SHALL reflect the consensus on the
       ground in the region covered by that entry.

   To be clear, the TZ Coordinator SHALL NOT set timezone policy for a
   region but use judgment and whatever available sources exist to
   assess what the average person on street would think the time
   actually is, or in case of historical corrections, was.


4.  Selecting or Replacing a TZ Coordinator

   From time to time it will be necessary to appoint a new TZ
   Coordinator.  This could occur for a number of reasons:

   o  The TZ Coordinator is retiring (as Arthur Olson is) or has
      announced that he or she will be unable to continue to perform the
      function;





Lear & Eggert           Expires November 20, 2011               [Page 4]


Internet-Draft      Maintaining the Timezone Database           May 2011


   o  The TZ Coordinator is missing, has become incapacitated, or has
      died; or
   o  The TZ Coordinator is not performing the function in accordance
      with community wishes.

   In any of these cases, members of the community should raise the
   issue on the TZ mailing list and attempt to reach consensus on a new
   candidate to fulfill the role of TZ Coordinator.  If rough consensus
   cannot be reached easily, the Area Directors of the IETF Applications
   Area should attempt to guide the members of the community to rough
   consensus.  The candidate that is agreed upon by the community
   through rough consensus shall be presented to the IESG for
   confirmation.  If rough consensus cannot be reached even with
   guidance from the Applications Area Directors, the IESG shall use
   whatever means it has at its disposal to choose a candidate who in
   its best judgment will be able to fulfill the role of TZ Coordinator.


5.  Appealing Database Decisions

   The TZ Coordinator makes decisions based on expertise, as well as
   with guidance from the TZ mailing list.  If a member of the community
   has a concern with an individual decision made by the TZ Coordinator
   with regard to the TZ database, the individual shall proceed as
   follows:

   1.  Attempt to resolve the concern directly with the TZ Coordinator.
   2.  If a resolution cannot be reached directly with the TZ
       Coordinator, express the concern to the community and attempt to
       achieve rough consensus regarding a resolution on the TZ mailing
       list.  The Area Directors of the IETF Applications Area may at
       their discretion attempt to guide the members of the community to
       rough consensus.
   3.  As a last resort if a resolution cannot be reached on the TZ
       mailing list, appeal to the IESG for a resolution.  The appellant
       must show that the decision made by the TZ Coordinator (a) was
       materially in error and (b) has caused material harm.  In its
       deliberations regarding an appeal, the IESG shall weigh all the
       evidence presented to it and use its best judgment in determining
       a resolution.


6.  Maintenance and Distribution of Reference Code

   Currently the maintainer of the TZ database also maintains reference
   code, most of which is public domain.  Several files from this
   software are currently distributed under license.  Where they exist,
   licenses SHALL NOT be changed.  IANA SHALL allow for the downloading



Lear & Eggert           Expires November 20, 2011               [Page 5]


Internet-Draft      Maintaining the Timezone Database           May 2011


   of this reference code.  The reference implementation shall be
   distributed along with an associated cryptographic signature
   verifiable by a public key that IANA will publish.


7.  Database Ownership

   The TZ database itself is not an IETF Contribution or an IETF
   Document.  Rather it is a pre-existing and regularly updated work
   that is in the public domain, and is intended to remain in the public
   domain.  Therefore, BCP 78 and BCP 79 do not apply to the TZ Database
   or contributions that individuals make to it.  Should any claims be
   made and substantiated against the database, the IANA will act in
   accordance with all competent court orders.  No ownership claims will
   be made by IANA or the IETF Trust on the database or the code.  Any
   person making a contribution to the database or code waives all
   rights to future claims.


8.  IANA Considerations

   If requested to do so, the IANA SHALL assist the IESG in selection of
   the TZ Coordinator, based on the procedures set forth above.  The
   IANA SHALL act as a repository for the TZ database and associated
   reference code.  The TZ Coordinator SHALL be named by the IESG as
   described above, and will act as the maintainer of the database and
   code, as described above.  The IANA SHALL provide the TZ Coordinator
   with appropriate access to maintain the database, as well as
   necessary tooling that may be required, so long as no direct software
   costs are incurred.  Both current and historical versions of the
   database will be stored and distributed via HTTP/HTTPs.  IANA will be
   operationally responsible for the security of the system upon which
   the database resides.

   The IANA SHALL also securely maintain a cryptographic private key
   that is used to sign the database, and that will survive a change of
   TZ Coordinator.


9.  Security Considerations

   The distribution of the database is currently not secured.  This memo
   states that moving forward the TZ database SHOULD be distributed with
   a valid cryptographic signature.







Lear & Eggert           Expires November 20, 2011               [Page 6]


Internet-Draft      Maintaining the Timezone Database           May 2011


10.  Acknowledgments

   The authors would like to thank the TZ mailing list for their
   remarkable achievements over the many years.  Thanks also to Marshall
   Eubanks, S. Moonesamy, Peter Saint-Andre, Alexey Melenkov, Tony
   Finch, Elwyn Davies, Alfred Hoenes, Ted Hardie, and Barry Leiba for
   the improvements they made to this document.  A special
   acknowledgment should be given to Arthur David Olson for his
   excellent stewardship.


11.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC4833]  Lear, E. and P. Eggert, "Timezone Options for DHCP",
              RFC 4833, April 2007.

   [RFC5226]  Narten, T. and H. Alvestrand, "Guidelines for Writing an
              IANA Considerations Section in RFCs", BCP 26, RFC 5226,
              May 2008.

   [RFC5545]  Desruisseaux, B., "Internet Calendaring and Scheduling
              Core Object Specification (iCalendar)", RFC 5545,
              September 2009.

   [TZDB]     Eggert, P. and A. Olson, "Sources for Time Zone and
              Daylight Saving Time Data",
              <http://www.twinsun.com/tz/tz-link.htm>.

   [1]  <mailto:tz@elsie.nci.nih.gov>


Appendix A.  Changes

   RFC-EDITOR: Please remove this section prior to publication.

   o  03: Reviewer comments.  Take out ATTENTION: comment.  Add backup
      coordinator. editorial nits.  Add discussion of metrics.  Modify
      both TZ Coordinator selection process and appeal process per
      Adrian's comments.  Clarify process rules per Russ' comments.
      Clarify that the criteria are not an exhaustive list.
   o  02: Separate out from RFC5226 a bit; Simplify language around
      submissions; host list to IANA; spelling corrections; clarify here
      and there.





Lear & Eggert           Expires November 20, 2011               [Page 7]


Internet-Draft      Maintaining the Timezone Database           May 2011


   o  01: Proper reference to RFC5226, add acknowledgments, several
      rewordings.
   o  Initial Revision


Authors' Addresses

   Eliot Lear
   Cisco Systems GmbH
   Richtistrasse 7
   Wallisellen, ZH  CH-8304
   Switzerland

   Phone: +41 1 878 9200
   Email: lear@cisco.com


   Paul Eggert
   UCLA
   Computer Science Department
   4532J Boelter Hall
   Los Angeles, CA  90095
   USA

   Phone: +1 310 267 2254
   Email: eggert@cs.ucla.edu

























Lear & Eggert           Expires November 20, 2011               [Page 8]