A Mission Statement for the IETF
The IETF states what it is for, defines the words it uses, and lists the five principles its work follows.
Alvestrand, H., "A Mission Statement for the IETF", BCP 95, RFC 3935, DOI 10.17487/RFC3935, October 2004, <https://www.rfc-editor.org/info/rfc3935>.
@misc{rfc3935,
series = {Request for Comments},
number = 3935,
howpublished = {RFC 3935},
publisher = {RFC Editor},
doi = {10.17487/RFC3935},
url = {https://www.rfc-editor.org/info/rfc3935},
author = {H. Alvestrand},
title = {{A Mission Statement for the IETF}},
pagetotal = 7,
year = 2004,
month = oct,
} RFC text
Contents
Network Working Group H. Alvestrand
Request for Comments: 3935 Cisco Systems
BCP: 95 October 2004
Category: Best Current Practice
A Mission Statement for the IETF
Status of this Memo
This document specifies an Internet Best Current Practices for the
Internet Community, and requests discussion and suggestions for
improvements. Distribution of this memo is unlimited.
Copyright Notice
Copyright (C) The Internet Society (2004).
Abstract
This memo gives a mission statement for the IETF, tries to define the
terms used in the statement sufficiently to make the mission
statement understandable and useful, argues why the IETF needs a
mission statement, and tries to capture some of the debate that led
to this point.
1. Mission Statement
The goal of the IETF is to make the Internet work better.
The mission of the IETF is to produce high quality, relevant
technical and engineering documents that influence the way people
design, use, and manage the Internet in such a way as to make the
Internet work better. These documents include protocol standards,
best current practices, and informational documents of various kinds.
The IETF will pursue this mission in adherence to the following
cardinal principles:
Open process - any interested person can participate in the work,
know what is being decided, and make his or her voice heard on the
issue. Part of this principle is our commitment to making our
documents, our WG mailing lists, our attendance lists, and our
meeting minutes publicly available on the Internet.
Technical competence - the issues on which the IETF produces its
documents are issues where the IETF has the competence needed to
speak to them, and that the IETF is willing to listen to
technically competent input from any source. Technical competence
also means that we expect IETF output to be designed to sound
network engineering principles - this is also often referred to as
"engineering quality".
Volunteer Core - our participants and our leadership are people who
come to the IETF because they want to do work that furthers the
IETF's mission of "making the Internet work better".
Rough consensus and running code - We make standards based on the
combined engineering judgement of our participants and our real-
world experience in implementing and deploying our specifications.
Protocol ownership - when the IETF takes ownership of a protocol or
function, it accepts the responsibility for all aspects of the
protocol, even though some aspects may rarely or never be seen on
the Internet. Conversely, when the IETF is not responsible for a
protocol or function, it does not attempt to exert control over
it, even though it may at times touch or affect the Internet.
2. Definition of Terms
Mission: What an organization sets out to do. This is in contrast to
its goal (which is what it hopes to achieve by fulfilling its
mission), and to its activities (which is what specific actions it
takes to achieve its mission).
The Internet: A large, heterogeneous collection of interconnected
systems that can be used for communication of many different types
between any interested parties connected to it. The term includes
both the "core Internet" (ISP networks) and "edge Internet"
(corporate and private networks, often connected via firewalls,
NAT boxes, application layer gateways and similar devices). The
Internet is a truly global network, reaching into just about every
country in the world.
The IETF community wants the Internet to succeed because we
believe that the existence of the Internet, and its influence on
economics, communication, and education, will help us to build a
better human society.
Standard: As used here, the term describes a specification of a
protocol, system behaviour or procedure that has a unique
identifier, and where the IETF has agreed that "if you want to do
this thing, this is the description of how to do it". It does not
imply any attempt by the IETF to mandate its use, or any attempt
to police its usage - only that "if you say that you are doing
this according to this standard, do it this way". The benefit of
a standard to the Internet is in interoperability - that multiple
products implementing a standard are able to work together in
order to deliver valuable functions to the Internet's users.
Participants: Individuals who participate in the process are the
fundamental unit of the IETF organization and the IETF's work.
The IETF has found that the process works best when focused around
people, rather than around organizations, companies, governments
or interest groups. That is not to say that these other entities
are uninteresting - but they are not what constitutes the IETF.
Quality: In this context, the ability to express ideas with enough
clarity that they can be understood in the same way by all people
building systems to conform to them, and the ability (and
willingness) to describe the properties of the system well enough
to understand important consequences of its design, and to ensure
that those consequences are beneficial to the Internet as a whole.
It also means that the specifications are designed with adherence
to sound network engineering principles, so that use for its
intended purpose is likely to be effective and not harmful to the
Internet as a whole.
Relevant: In this context, useful to some group of people who have to
make decisions that affect the Internet, including, but not
limited to, hardware and software implementors, network builders,
network operators, and users of the Internet. Note that it does
not mean "correct" or "positive" - a report of an experiment that
failed, or a specification that clearly says why you should not
use it in a given situation, can be highly relevant - for deciding
what NOT to do. A part of being relevant is being timely - very
often, documents delivered a year after core decisions have been
taken are far less useful than documents that are available to the
decision-makers at decision time.
3. The Need for a Mission Statement
The IETF has to make decisions. And in some cases, people acting on
behalf of the IETF have to make decisions without consulting the
entire IETF first.
There are many reasons for this, including the near-impossibility of
getting an informed consensus opinion on a complex subject out of a
community of several thousand people in a short time.
Having a defined mission is one of the steps we can take in order to
evaluate alternatives: Does this help or hinder the mission, or is it
orthogonal to it? If there are limited resources, are there things
that they could be invested in that help the mission better?
(Another step is to choose leaders that we trust to exercise their
good judgement and do the right thing. But we're already trying to
do that.)
4. Issues with Scoping the IETF's Mission
4.1. The Scope of the Internet
A very difficult issue in discussing the IETF's mission has been the
scope of the term "for the Internet". The Internet is used for many
things, many of which the IETF community has neither interest nor
competence in making standards for.
The Internet isn't value-neutral, and neither is the IETF. We want
the Internet to be useful for communities that share our commitment
to openness and fairness. We embrace technical concepts such as
decentralized control, edge-user empowerment and sharing of
resources, because those concepts resonate with the core values of
the IETF community. These concepts have little to do with the
technology that's possible, and much to do with the technology that
we choose to create.
At the same time, it is clear that many of the IETF-defined
technologies are useful not only for the Internet, but also for
networks that have no direct relation to the Internet itself.
In attempting to resolve the question of the IETF's scope, perhaps
the fairest balance is struck by this formulation: "protocols and
practices for which secure and scalable implementations are expected
to have wide deployment and interoperation on the Internet, or to
form part of the infrastructure of the Internet."
In addition to this constraint, we are also constrained by the
principle of competence: Where we do not have, and cannot gather, the
competence needed to make technically sound standards, we should not
attempt to take the leadership.
4.2. The Balance Between Research, Invention and Adoption
The IETF has traditionally been a community for experimentation with
things that are not fully understood, standardization of protocols
for which some understanding has been reached, and publication of
(and refinement of) protocols originally specified outside the IETF
process.
All of these activities have in common that they produce documents -
but the documents should be judged by very different criteria when
the time to publish comes around, and it's not uncommon to see people
confused about what documents are in which category.
In deciding whether or not these activities should be done within the
IETF, one should not chiefly look at the type of activity, but the
potential benefit to the Internet - an experiment that yields
information about the fact that an approach is not viable might be of
greater benefit to the Internet than publishing a standard that is
technically competent, but only useful in a few special cases.
For research of an essentially unbounded nature, with unknown
probability of success, it may be more relevant to charter a research
group than a standards group. For activities with a bounded scope -
such as specifying several alternative protocols to the point where
experiments can identify the better one for standardization - the
IETF's working group mechanism may be an appropriate tool.
4.3. The Balance Between Mission and Procedures
The mission is intended to state what the IETF is trying to achieve.
There are many methods that can be chosen to achieve these outcomes -
for instance, the appeals procedure is defined so that we can detect
cases where our fundamental principles of technical competence and
open process has been violated; it is not itself a fundamental value.
Similarly, the question of what body in the IETF declares that a
document is ready for publication is entirely outside the mission
statement; we can imagine changing that without in any way impacting
what the IETF mission is - even though it may significantly impact
the ability to achieve that mission.
4.4. The Reach of the Internet
The Internet is a global phenomenon. The people interested in its
evolution are from every culture under the sun and from all walks of
life. The IETF puts its emphasis on technical competence, rough
consensus and individual participation, and needs to be open to
competent input from any source. The IETF uses the English language
for its work is because of its utility for working in a global
context.
4.5. Protocol Ownership
A problem akin to the problem of deciding on the area of the IETF's
competence arises when a protocol that is clearly in the IETF's scope
is used both on and off the Internet - the premier example is of
course the Internet Protocol itself.
Sometimes the IETF defines standards that ultimately see the most use
outside the global Internet. The IETF, having defined the standard,
will continue to provide the necessary administration of that
protocol.
Sometimes the IETF leverages standards that are defined and
maintained by other organizations; we continue to work with those
organizations on their standards and do not attempt to take them
over.
5. Security Considerations
Considering security is one of the core principles of sound network
engineering for the Internet. Apart from that, it's not relevant to
this memo.
6. Acknowledgements
This document is a result of many hours of debate, countless reviews,
and limitless emails. As such, any acknowledgements section is bound
to be incomplete.
Among the many who provided input were the current members of the
IESG (Alex Zinin, Allison Mankin, Bert Wijnen, Bill Fenner, David
Kessens, Jon Peterson, Margaret Wasserman, Russ Housley, Scott
Hollenbeck, Steve Bellovin, Ted Hardie, Thomas Narten) and recent
IESG members (Ned Freed, Randy Bush, Erik Nordmark), as well as
multiple IAB members, and many members from the community, including
James Polk, John Klensin, Pekka Savola, Paul Hoffman, Eliot Lear,
Jonne Soininen, Fred Baker, Dean Anderson, John Leslie, Susan Harris,
and many others. Special thanks go to Leslie Daigle, the IAB chair.
Author's Address
Harald Tveit Alvestrand
Cisco Systems
Weidemanns vei 27
Trondheim 7043
NO
EMail: harald@alvestrand.no
Full Copyright Statement
Copyright (C) The Internet Society (2004).
This document is subject to the rights, licenses and restrictions
contained in BCP 78, and except as set forth therein, the authors
retain all their rights.
This document and the information contained herein are provided on an
"AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET
ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE
INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Intellectual Property
The IETF takes no position regarding the validity or scope of any
Intellectual Property Rights or other rights that might be claimed to
pertain to the implementation or use of the technology described in
this document or the extent to which any license under such rights
might or might not be available; nor does it represent that it has
made any independent effort to identify any such rights. Information
on the IETF's procedures with respect to rights in IETF Documents can
be found in BCP 78 and BCP 79.
Copies of IPR disclosures made to the IETF Secretariat and any
assurances of licenses to be made available, or the result of an
attempt made to obtain a general license or permission for the use of
such proprietary rights by implementers or users of this
specification can be obtained from the IETF on-line IPR repository at
http://www.ietf.org/ipr.
The IETF invites any interested party to bring to its attention any
copyrights, patents or patent applications, or other proprietary
rights that may cover technology that may be required to implement
this standard. Please address the information to the IETF at ietf-
ipr@ietf.org.
Acknowledgement
Funding for the RFC Editor function is currently provided by the
Internet Society.
ISO Plain Language
On this page
§1The Mission and Its Five Principles
The goal of the IETF is to make the Internet work better. Its mission is to produce high quality, relevant technical and engineering documents that influence the way people design, use and manage the Internet in such a way as to make the Internet work better. Those documents include protocol standards, best current practices and informational documents of various kinds.
The mission is pursued by adhering to five cardinal principles. Open process means any interested person can take part in the work, know what is being decided and make his or her voice heard, and it commits the IETF to making its documents, working group mailing lists, attendance lists and meeting minutes publicly available on the Internet. Technical competence means the issues the IETF writes about are ones where it has the competence to speak, that it is willing to listen to technically competent input from any source, and that its output is expected to sound network engineering principles. Volunteer core means participants and leaders come because they want to do work that furthers the mission. Rough consensus and running code means standards rest on the combined engineering judgement of the participants and on real-world experience implementing and deploying the specifications. Protocol ownership means the IETF accepts responsibility for all aspects of a protocol it owns, even aspects that rarely or never appear on the Internet, and does not try to control protocols it does not own, even when they touch or affect the Internet.
The IETF says its job is to make the Internet work better, and it does that by writing standards, best current practices and informational documents. Five principles guide the work: open process, technical competence, a volunteer core, rough consensus and running code, and protocol ownership.
- Open processAnyone can take part, know what is being decided and be heard. Documents, mailing lists and minutes are public.
- Technical competenceThe IETF speaks only where it has the competence, listens to competent input from any source, and expects sound engineering.
- Volunteer coreParticipants and leaders come because they want to do work that furthers the mission.
- Rough consensus and running codeStandards rest on the participants' engineering judgement and on real experience implementing them.
- Protocol ownershipThe IETF takes responsibility for what it owns and leaves alone what it does not.
§2The Words the Statement Uses
The RFC defines the terms it depends on. A mission is what an organization sets out to do, in contrast to its goal, which is what it hopes to achieve, and its activities, which are the specific actions it takes. The Internet is a large, heterogeneous collection of interconnected systems that can be used for communication of many different types between any interested parties connected to it. The term covers both the core Internet, meaning ISP networks, and the edge Internet, meaning corporate and private networks often reached through firewalls, NAT boxes and application layer gateways.
A standard, as used here, is a specification of a protocol, system behaviour or procedure that has a unique identifier and where the IETF has agreed that if you want to do this thing, this is the description of how to do it. It does not mandate use and the IETF does not police it. Its benefit is interoperability: several products that implement a standard can work together. Participants are the individuals who take part in the process, and the RFC says the process works best when focused around people rather than around organizations, companies, governments or interest groups. Quality means expressing ideas clearly enough that everyone building systems to them understands them the same way, and describing the properties of a system well enough to understand its important consequences and ensure they benefit the Internet as a whole. Relevant means useful to some group of people who have to make decisions that affect the Internet; it does not mean correct or positive, so a report of a failed experiment or a specification that says why not to use something can be highly relevant.
The RFC defines the words it uses so that people can argue about the IETF's work in the same terms. A standard here is a description of how to do something, not a rule that forces anyone to do it, and its value is that different products built from it can work together.
§3Why a Mission Statement Is Needed
The IETF has to make decisions, and in some cases people acting on its behalf have to make decisions without consulting the entire IETF first. There are many reasons for this, including the near-impossibility of getting an informed consensus opinion on a complex subject out of a community of several thousand people in a short time.
Having a defined mission is one of the steps available for evaluating alternatives. Does a proposal help or hinder the mission, or is it orthogonal to it? If resources are limited, are there things they could be invested in that help the mission better? The RFC adds another step, which is to choose leaders trusted to exercise good judgement and do the right thing, but notes that the IETF is already trying to do that.
The IETF often has to decide without asking everyone first, because a community of thousands cannot agree quickly on complex questions. A written mission gives people a test for proposals: does this help make the Internet work better, or not?
§4Drawing the Boundary of the Work
A very difficult issue in discussing the mission is how wide the phrase "for the Internet" reaches, because the Internet is used for many things the IETF has neither interest nor competence in making standards for. The RFC proposes that the fairest balance is struck by this formulation: protocols and practices for which secure and scalable implementations are expected to have wide deployment and interoperation on the Internet, or to form part of the infrastructure of the Internet. The principle of competence adds a second limit: where the IETF does not have, and cannot gather, the competence needed to make technically sound standards, it should not attempt to take the leadership.
The RFC also separates the mission from the methods used to reach it. The appeals procedure is defined so that violations of the fundamental principles of technical competence and open process can be detected; it is not itself a fundamental value. Likewise, the question of which body declares a document ready for publication is entirely outside the mission statement, and the RFC says it is easy to imagine changing that without affecting the mission at all, even though it would change how well the mission could be achieved. The Internet is a global phenomenon, so the IETF keeps the emphasis on technical competence, rough consensus and individual participation, stays open to competent input from any source, and uses English for its work because of its utility in a global context. On protocol ownership, the IETF sometimes defines standards that end up used mostly outside the global Internet, and continues to administer them; it also leverages standards defined and maintained by other organizations and works with those organizations instead of taking them over.
The RFC limits the IETF's work to protocols and practices meant to be deployed widely and to work with other implementations, or that become part of the Internet's infrastructure. It also separates the goal from the process: the appeals procedure and the publication rules are tools, not values.
§5Security Considerations
The RFC says that considering security is one of the core principles of sound network engineering for the Internet. Apart from that, security is not relevant to the memo itself. The document sets out how the IETF decides what to work on and how it argues about its own process; it defines no protocol, no message format and no mechanism that could be attacked.
The memo has little to say about security, because it defines no protocol. It notes only that thinking about security is one of the core principles of good network engineering.