]> Carnegie Mellon University

5000 Forbes Avenue Cyert Hall 285 Pittsburgh PA 15213 U.S.A. +1 412 268 2638 murch@andrew.cmu.edu

University of Manchester

5 Clerewood Avenue Heald Green Cheadle Cheshire SK8 3JU U.K. +44 161 436 6131 chl@clerew.man.ac.uk

FlyDash, Inc.

1741 Sunset Dr. Pacific Grove CA 93950 U.S.A. +1 415 233 1000 dan@dankohn.com

Applications Usenet Format Working Group Usenet Usefor This document may contain material from IETF Documents or IETF Contributions published or made publicly available before November 10, 2008. The person(s) controlling the copyright in some of this material may not have granted the IETF Trust the right to allow modifications of such material outside the IETF Standards Process. Without obtaining an adequate license from the person(s) controlling the copyright in such materials, this document may not be modified outside the IETF Standards Process, and derivative works of it may not be created outside the IETF Standards Process, except to format it for publication as an RFC or to translate it into languages other than English. This document specifies the syntax of Netnews articles in the context of the Internet Message Format (RFC 5322) and Multipurpose Internet Mail Extensions (MIME) (RFC 2045). This document obsoletes RFC 1036, providing an updated specification to reflect current practice and incorporating incremental changes specified in other documents.

"Netnews" is a set of protocols for generating, storing, and retrieving news "articles" (whose format is a subset of that for Email messages), and for exchanging them amongst a readership that is potentially widely distributed. It is organized around "newsgroups", with the expectation that each reader will be able to see all articles posted to each newsgroup in which he participates. These protocols most commonly use a flooding algorithm, which propagates copies throughout a network of participating servers. Typically, only one copy is stored per server, and each server makes it available on demand to readers who are able to access that server.

This document specifies the syntax of Netnews articles in the context of the Internet Message Format and Multipurpose Internet Mail Extensions (MIME) . This document obsoletes , updating the syntax of Netnews articles to reflect current practice and incorporating changes and clarifications specified in other documents such as . This is the first in a set of documents that obsolete . This document focuses on the syntax and semantics of Netnews articles. is also a Standards Track document and describes the protocol issues of Netnews articles, independent of transport protocols such as the Network News Transfer Protocol (NNTP). , "Usenet Best Practice", describes implementation recommendations to improve interoperability and usability. This specification is intended as a definition of what article content format is to be passed between systems. Although many news systems locally store articles in this format (which eliminates the need for translation between formats), local storage is outside of the scope of this standard.

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in .

Header fields defined in this specification use the Augmented Backus-Naur Form (ABNF) notation (including the Core Rules) specified in as well as many constructs defined in , as updated by , and . Specifically:

token = <see RFC 2045 Section 5.1> value = <see RFC 2045 Section 5.1> parameter = <see RFC 2231 Section 7> attribute = <see RFC 2231 Section 7> FWS = <see RFC 5322 Section 3.2.2> comment = <see RFC 5322 Section 3.2.2> CFWS = <see RFC 5322 Section 3.2.2> atext = <see RFC 5322 Section 3.2.3> dot-atom-text = <see RFC 5322 Section 3.2.3> phrase = <see RFC 5322 Section 3.2.5> utext = <see RFC 2822 Section 3.2.6> date-time = <see RFC 5322 Section 3.3> mailbox = <see RFC 5322 Section 3.4> mailbox-list = <see RFC 5322 Section 3.4> address-list = <see RFC 5322 Section 3.4> body = <see RFC 5322 Section 3.5> fields = <see RFC 5322 Section 3.6> IPv6address = <see RFC 3986 Section 3.2.2> IPv4address = <see RFC 3986 Section 3.2.2> ALPHA = <see RFC 5234 Appendix B.1> CRLF = <see RFC 5234 Appendix B.1> DIGIT = <see RFC 5234 Appendix B.1> DQUOTE = <see RFC 5234 Appendix B.1> SP = <see RFC 5234 Appendix B.1>

Additionally, specifies a stricter definition of <msg&nbhy;id> than the syntax in Section 3.6.4 of .

An "article" is the unit of Netnews, analogous to an "message". A "proto-article" is one that has not yet been injected into the news system. In contrast to an article, a proto-article may lack some mandatory header fields. A "message identifier" () is a unique identifier for an article, usually supplied by the user agent that posted it or, failing that, by the "news server". It distinguishes the article from every other article ever posted anywhere. Articles with the same message identifier are treated as if they are the same article regardless of any differences in the body or header fields. A "newsgroup" is a forum having a name and that is intended for articles on a specific topic. An article is "posted to" a single newsgroup or several newsgroups. When an article is posted to more than one newsgroup, it is said to be "crossposted"; note that this differs from posting the same text as part of each of several articles, one per newsgroup. A newsgroup may be "moderated", in which case submissions are not posted directly, but mailed to a "moderator" for consideration and possible posting. Moderators are typically human but may be implemented partially or entirely in software. A "poster" is the person or software that composes and submits a potentially compliant article to a user agent. A "reader" is the person or software reading Netnews articles. A "followup" is an article containing a response to the contents of an earlier article, its "precursor". Every followup includes a "References" header field identifying that precursor (but note that non-followup articles may also use a References header field). A "control message" is an article that is marked as containing control information; a news server receiving such an article may (subject to the policies observed at that site) take actions beyond just filing and passing on the article. A news server is software that may accept articles from a user agent, and/or make articles available to user agents, and/or exchange articles with other news servers. A "user agent" is software that may help posters submit proto-articles to a news server, and/or fetch articles from a news server and present them to a reader, and/or assist the reader in creating articles and followups. The generic term "agent" is used when describing requirements that apply to both user agents and news servers. An agent is said to "generate" a construct if it did not exist before the agent created it. Examples are when a user agent creates a message from text and addressing information supplied by a user, or when a news server creates an "Injection-Info" header field for a newly posted message. An agent is said to "accept" a construct if some other entity generates it and passes it to the agent in question, and the agent processes it without treating it as a format or protocol error.

This document uses a cite-by-reference methodology, rather than repeating the contents of other standards, which could otherwise result in subtle differences and interoperability challenges. Although this document is as a result rather short, it requires complete understanding and implementation of the normative references to be compliant. defines the format of Netnews articles. details the header fields necessary to make an article suitable for the Netnews environment.

An article is said to be conformant to this specification if it conforms to the format specified in Section 3 of and to the additional requirements of this specification. An article that uses the obsolete syntax specified in Section 4 of is NOT conformant to this specification, except for the following two cases: Articles are conformant if they use the <obs-phrase> construct (use of a phrase like "John Q. Public" without the use of quotes, see Section 4.1 of ), but agents MUST NOT generate productions of such syntax. Articles are conformant if they use the "GMT" <zone>, as specified in . This document, and specifications that build upon it, specify how to handle conformant articles. Handling of non-conformant articles is outside the scope of this specification. Agents conforming to this specification MUST generate only conformant articles. The text below uses ABNF to specify restrictions on the syntax specified in ; this grammar is intended to be more restrictive than the grammar. Articles must conform to the ABNF specified in and also to the restrictions specified here, both those that are expressed as text and those that are expressed as ABNF. NOTE: Other specifications use the term "header" as a synonym for what calls "header field". This document follows the terminology in Section 2 of in using the terms "line", "header field", "header field name", "header field body", and "folding", based on a belief that consistent terminology among specifications that depend on each other makes the specifications easier to use in the long run.

All header fields in a Netnews article are compliant with ; this specification, however, is less permissive in what can be generated and accepted by agents. The syntax allowed for Netnews article headers is a strict subset of the Internet Message Format headers, making all headers compliant with this specification inherently compliant with . Note however that the converse is not guaranteed to be true in all cases. General rules that apply to all header fields (even those documented in and ) are listed below, and those that apply to specific header fields are described in the relevant sections of this document. All agents MUST generate header fields so that at least one space immediately follows the ':' separating the header field name and the header field body (for compatibility with deployed software, including NNTP servers). News agents MAY accept header fields that do not contain the required space. Every line of a header field body (including the first and any that are subsequently folded) MUST contain at least one non-whitespace character. NOTE: This means that no header field body defined by or referenced by this document can be empty. As a result, rather than using the <unstructured> syntax from Section 3.2.5 of , this document uses a stricter definition:

unstructured = *WSP utext *( [FWS] utext ) *WSP

NOTE: The specification sometimes uses [FWS] at the beginning or end of ABNF describing header field content. This specification uses *WSP in such cases, also in cases where this specification redefines constructs from . This is done for consistency with the restriction described here, but the restriction applies to all header fields, not just those where ABNF is defined in this document. Compliant software MUST NOT generate (but MAY accept) header field lines of more than 998 octets. This is the only limit on the length of a header field line prescribed by this standard. However, specific rules to the contrary may apply in particular cases (for example, according to , lines of a header field containing encoded words are limited to 76 octets). includes suggested limits for convenience of display by user agents. NOTE: As stated in , there is NO restriction on the number of lines into which a header field may be split, and hence there is NO restriction on the total length of a header field (in particular it may, by suitable folding, be made to exceed the 998-octet restriction pertaining to a single header field line). The character set for header fields is US-ASCII. Where the use of non-ASCII characters is required, they MUST be encoded using the MIME mechanisms defined in and .

User agents MUST meet the definition of MIME conformance in and MUST also support . This level of MIME conformance provides support for internationalization and multimedia in message bodies , , and , and support for internationalization of header fields and . Note that currently exist for and . For the purposes of Section 5 of , all header fields defined in of this standard are to be considered as "extension message header fields", permitting the use of encodings within any <unstructured> header field, or within any <comment> or <phrase> permitted within any structured header field. User agents MAY accept and generate other MIME extension header fields, and in particular SHOULD accept Content-Disposition and Content-Language .

The following news header fields extend those defined in Section 3.6 of :

fields =/ *( approved / archive / control / distribution / expires / followup-to / injection-date / injection-info / lines / newsgroups / organization / path / summary / supersedes / user-agent / xref )

Each of these header fields may occur at most once in a news article. The following header fields defined in this document do not allow <comment>s (i.e., they use FWS rather than CFWS).

Control Distribution Followup-To Lines Newsgroups Path Supersedes Xref

This also applies to the following header field defined in :

Message-ID

Most of these header fields are mainly of interest to news servers, and news servers often need to process these fields very rapidly. Thus, some header fields prohibit <comment>s.

Each Netnews article conformant with this specification MUST have exactly one of each of the following header fields: Date, From, Message-ID, Newsgroups, Path, and Subject.

The Date header field is the same as that specified in Sections 3.3 and 3.6.1 of , with the added restrictions detailed above in . However, the use of "GMT" as a time zone (part of <obs-zone>), although deprecated, is widespread in Netnews articles today. Therefore, agents MUST accept <date-time> constructs that use the "GMT" zone.

orig-date = "Date:" SP date-time CRLF

NOTE: This specification does not change , which says that agents MUST NOT generate <date-time> constructs that include any zone names defined by <obs-zone>. Software that accepts dates with unknown timezones SHOULD treat such timezones as equivalent to "-0000" when comparing dates, as specified in Section 4.3 of . Also note that these requirements apply wherever <date-time> is used, including Injection-Date and Expires (Sections and , respectively).

The From header field is the same as that specified in Section 3.6.2 of , with the added restrictions detailed above in .

from = "From:" SP mailbox-list CRLF

The Message-ID header field contains a unique message identifier. Netnews is more dependent on message identifier uniqueness and fast comparison than Email is, and some news software and standards might have trouble with the full range of possible <msg&nbhy;id>s permitted by . This section therefore restricts the syntax of <msg&nbhy;id> as compared to Section 3.6.4 of . The global uniqueness requirement for <msg&nbhy;id> in is to be understood as applying across all protocols using such message identifiers, and across both Email and Netnews in particular.

message-id = "Message-ID:" SP *WSP msg-id *WSP CRLF msg-id = "<" msg-id-core ">" ; maximum length is 250 octets msg-id-core = id-left "@" id-right id-left = dot-atom-text / no-fold-quote id-right = dot-atom-text / no-fold-literal no-fold-quote = DQUOTE ( "." *mqtext / *mqtext "." / *mqtext mqspecial *mqtext ) DQUOTE mqtext = atext / "." / mqspecial mqspecial = "(" / ")" / ; same as specials except "<" / ; "\" and DQUOTE quoted "[" / "]" / ; "." doubled and ">" omitted ":" / ";" / "@" / "," / ".." / "\\" / "\" DQUOTE no-fold-literal = "[" *( mdtext / "\[" / "\]" / "\\" ) "]" mdtext = %d33-61 / ; The rest of the US-ASCII %d63-90 / ; characters not including %d94-126 ; ">", "[", "]", or "\"

The msg-id MUST NOT be more than 250 octets in length. NOTE: The length restriction ensures that systems that accept message identifiers as a parameter when referencing an article (e.g., ) can rely on a bounded length. Observe that msg-id includes the < and >. Observe also that in contrast to the corresponding header field in : The syntax does not allow comments within the Message-ID header field. The syntax ensures that no string of characters is quoted if it was already a <dot-atom-text> (it MUST start or end with a ".", or contain at least one <mqspecial>). It also ensures that no single character is prefixed by a "\" in the form of a <quoted-pair> unless strictly necessary. The syntax excludes all control characters. There is no possibility for ">" or WSP to occur inside a <msg&nbhy;id>, whether quoted or not. Even though commonly derived from <domain>s, <id-rights>s are case-sensitive (and thus, once created, are not to be altered during subsequent transmission or copying) This is to simplify processing by news servers and to ensure interoperability with existing implementations and compliance with . Thus, whereas under the following <msg&nbhy;id>s would be considered semantically equivalent:

<ab.cd@example.com> <"ab.cd"@example.com> <"ab.\cd"@example.com>

only the first is syntactically permitted by this standard, and hence a simple comparison of octets will always suffice to determine the identity of two <msg&nbhy;id>s. Also note that this updated ABNF applies wherever <msg&nbhy;id> is used, including the References header field discussed in and the Supersedes header field discussed in . Some software will try to match the <id-right> of a <msg&nbhy;id> in a case-insensitive fashion; some will match it in a case-sensitive fashion. Implementations MUST NOT generate a Message-ID where the only difference from another Message-ID is the case of characters in the <id-right> part. When generating a <msg&nbhy;id>, implementations SHOULD use a domain name as the <id-right>. NOTE: Section 3.6.4 of recommends that the <id-right> should be a domain name or a domain literal. Domain literals are troublesome since many IP addresses are not globally unique; domain names are more likely to generate unique Message-IDs.

The Newsgroups header field specifies the newsgroup(s) to which the article is posted.

newsgroups = "Newsgroups:" SP newsgroup-list CRLF newsgroup-list = *WSP newsgroup-name *( [FWS] "," [FWS] newsgroup-name ) *WSP newsgroup-name = component *( "." component ) component = 1*component-char component-char = ALPHA / DIGIT / "+" / "-" / "_"

Not all servers support optional FWS in the list of newsgroups. In particular, folding the Newsgroups header field over several lines has been shown to harm propagation significantly. Optional FWS in the <newsgroup-list> SHOULD NOT be generated, but MUST be accepted. A <component> SHOULD NOT consist solely of digits and SHOULD NOT contain uppercase letters. Such <component>s MAY be used only to refer to existing groups that do not conform to this naming scheme, but MUST NOT be used otherwise. NOTE: All-digit <component>s conflict with one widely used storage scheme for articles. Mixed-case groups cause confusion between systems with case-sensitive matching and systems with case-insensitive matching of <newsgroup-name>s. <component>s beginning with underline ("_") are reserved for use by future versions of this standard and SHOULD NOT be generated by user agents (whether in header fields or in newgroup control messages as defined by ). However, such names MUST be accepted by news servers. <component>s beginning with "+" and "-" are reserved for private use and SHOULD NOT be generated by user agents (whether in header fields or in newgroup control messages ) without a private prior agreement to do so. However, such names MUST be accepted by news servers. The following <newsgroup-name>s are reserved and MUST NOT be used as the name of a newsgroup: Groups whose first (or only) <component> is "example" The group "poster" The following <newsgroup-name>s have been used for specific purposes in various implementations and protocols and therefore MUST NOT be used for the names of normal newsgroups. They MAY be used for their specific purpose or by local agreement. Groups whose first (or only) component is "to" Groups whose first (or only) component is "control" Groups that contain (or consist only of) the component "all" Groups that contain (or consist only of) the component "ctl" The group "junk" NOTE: "example.*" is reserved for examples in this and other standards; "poster" has a special meaning in the Followup-To header field; "to.*" is reserved for certain point-to-point communications in conjunction with the "ihave" control message as defined in ; "control.*" and "junk" have special meanings in some news servers; "all" is used as a wildcard in some implementations; and "ctl" was formerly used to indicate a <control-command> within the Newsgroups header field.

The Path header field indicates the route taken by an article since its injection into the Netnews system. Each agent that processes an article is required to prepend at least one <path-identity> to this header field body. This is primarily so that news servers are able to avoid sending articles to sites already known to have them, in particular the site they came from. Additionally, it permits gathering statistics and tracing the route articles take in moving over the network.

path = "Path:" SP *WSP path-list tail-entry *WSP CRLF path-list = *( path-identity [FWS] [path-diagnostic] "!" ) path-diagnostic = diag-match / diag-other / diag-deprecated diag-match = "!" ; another "!" diag-other = "!." diag-keyword [ "." diag-identity ] [FWS] diag-deprecated = "!" IPv4address [FWS] diag-keyword = 1*ALPHA ; see [RFC5537] diag-identity = path-identity / IPv4address / IPv6address tail-entry = path-nodot ; may be the string "not-for-mail" path-identity = ( 1*( label "." ) toplabel ) / path-nodot path-nodot = 1*( alphanum / "-" / "_" ) ; legacy names label = alphanum [ *( alphanum / "-" ) alphanum ] toplabel = ( [ label *( "-" ) ] ALPHA *( "-" ) label ) / ( label *( "-" ) ALPHA [ *( "-" ) label ] ) / ( label 1*( "-" ) label ) alphanum = ALPHA / DIGIT ; compare [RFC3696]

A <path-identity> is a name identifying a site. It takes the form of a domain name having two or more components separated by dots, or a single name with no dots (<path-nodot>). Each <path-identity> in the <path-list> (which does not include the <tail-entry>) indicates, from right to left, the successive agents through which the article has passed. The use of the <diag-match>, which appears as "!!", indicates that the agent to its left verified the identity of the agent to its right before accepting the article (whereas the <path-delimiter> "!" implies no such claim). NOTE: Historically, the <tail-entry> indicated the name of the sender. If not used for this purpose, the string "not-for-mail" is often used instead (since at one time the whole path could be used as a mail address for the sender). NOTE: Although case-insensitive, it is intended that the <diag-keyword>s should be in uppercase, to distinguish them from the <path-identity>s, which are traditionally in lowercase. A <path-diagnostic> is an item inserted into the Path header field for purposes other than to indicate the name of a site. The use of these is described in . NOTE: One usage of a <path-diagnostic> is to record an IP address. The fact that <IPv6address>es are allowed means that the colon (:) is permitted; note that this may cause interoperability problems at older sites that regard ":" as a <path-delimiter> and have neighbors whose names have 4 or fewer characters, and where all the characters are valid HEX digits. NOTE: Although <IPv4address>es have occasionally been used in the past (usually with a diagnostic intent), their continued use is deprecated (though it is still acceptable in the form of the <diag-deprecated>).

The Subject header field is the same as that specified in Section 3.6.5 of , with the added restrictions detailed above in . Further discussion of the content of the Subject header field appears in and .

subject = "Subject:" SP unstructured CRLF

None of the header fields appearing in this section are required to appear in every article, but some of them may be required in certain types of articles. Further discussion of these requirements appears in and . The header fields Comments, Keywords, Reply-To, and Sender are used in Netnews articles in the same circumstances and with the same meanings as those specified in , with the added restrictions detailed above in . Multiple occurrences of the Keywords header field are not permitted.

comments = "Comments:" SP unstructured CRLF keywords = "Keywords:" SP phrase *("," phrase) CRLF reply-to = "Reply-To:" SP address-list CRLF sender = "Sender:" SP mailbox CRLF

The MIME header fields MIME-Version, Content-Type, Content-Transfer-Encoding, Content-Disposition, and Content-Language are used in Netnews articles in the same circumstances and with the same meanings as those specified in , , and , with the added restrictions detailed above in . All remaining news header fields are described below.

The Approved header field indicates the mailing addresses (and possibly the full names) of the persons or entities approving the article for posting. Its principal uses are in moderated articles and in group control messages; see .

approved = "Approved:" SP mailbox-list CRLF

The Archive header field provides an indication of the poster's intent regarding preservation of the article in publicly accessible long-term or permanent storage.

archive = "Archive:" SP [CFWS] ("no" / "yes") *( [CFWS] ";" [CFWS] archive-param ) [CFWS] CRLF archive-param = parameter

The presence of an Archive header field in an article with a field body of "no" indicates that the poster does not permit redistribution from publicly accessible long-term or permanent archives. A field body of "yes" indicates that the poster permits such redistribution. No <parameter>s are currently defined; if present, they can be ignored. Further discussion of the use of the Archive header field appears in .

The Control header field marks the article as a control message and specifies the desired actions (in addition to the usual actions of storing and/or relaying the article).

control = "Control:" SP *WSP control-command *WSP CRLF control-command = verb *( 1*WSP argument ) verb = token argument = 1*( %x21-7E )

The verb indicates what action should be taken, and the argument(s) (if any) supply details. In some cases, the <body> (as defined in ) of the article may also contain details. The legal verbs and respective arguments are discussed in the companion document, . An article with a Control header field MUST NOT also have a Supersedes header field.

The Distribution header field specifies geographic or organizational limits on an article's propagation.

distribution = "Distribution:" SP dist-list CRLF dist-list = *WSP dist-name *( [FWS] "," [FWS] dist-name ) *WSP dist-name = ALPHA / DIGIT *( ALPHA / DIGIT / "+" / "-" / "_" )

The <dist-name>s "world" and "local" are reserved. "world" indicates unlimited distribution and SHOULD NOT be used explicitly, since it is the default when the Distribution header field is absent entirely. "local" is reserved for indicating distribution only to the local site, as defined by local software configuration. "All" MUST NOT be used as a <dist-name>. <dist-name>s SHOULD contain at least three characters, except when they are two-letter country codes drawn from . <dist-name>s are case-insensitive (i.e., "US", "Us", "uS", and "us" all specify the same distribution). Optional FWS in the <dist-list> SHOULD NOT be generated, but MUST be accepted.

The Expires header field specifies a date and time when the poster deems the article to be no longer relevant and could usefully be removed ("expired"). NOTE: This header field is useful when the poster desires an unusually long or an unusually short expiry time.

expires = "Expires:" SP date-time CRLF

See the remarks under regarding the syntax of <date&nbhy;time> and the requirements and recommendations to which it is subject. NOTE: The Expires header field is also sometimes used in Email with a similar meaning; see .

The Followup-To header field specifies to which newsgroup(s) the poster has requested that followups are to be posted. The Followup-To header field SHOULD NOT appear in a message, unless its content is different from the content of the Newsgroups header field.

followup-to = "Followup-To:" SP ( newsgroup-list / poster-text ) CRLF poster-text = *WSP %d112.111.115.116.101.114 *WSP ; "poster" in lowercase

The syntax is the same as that of the Newsgroups header field, with the exception that the keyword "poster" requests that followups should be emailed directly to the article's poster (using the addresses contained in the Reply-To header field if one exists, otherwise using the addresses contained in the From header field) rather than posted to any newsgroups. Agents MUST generate the keyword "poster" in lowercase, but MAY choose to recognize case-insensitive forms such as "Poster". As in the Newsgroups header field, optional FWS in the <newsgroup-list> SHOULD NOT be generated, but MUST be accepted.

The Injection-Date header field contains the date and time that the article was injected into the network. Its purpose is to enable news servers, when checking for "stale" articles, to use a <date-time> that was added by a news server at injection time rather than one added by the user agent at message composition time. This header field MUST be inserted whenever an article is injected. However, software that predates this standard does not use this header, and therefore agents MUST accept articles without the Injection-Date header field.

injection-date = "Injection-Date:" SP date-time CRLF

See the remarks under regarding the syntax of <date&nbhy;time> and the requirements and recommendations to which it is subject. NOTE: Since clocks on various agents are not necessarily synchronized, the <date-time> in this header field might not be a later value than that in the Date header field. Agents MUST NOT alter a pre-existing Date header field when adding an Injection-Date header field. This header field is intended to replace the currently used but undocumented "NNTP-Posting-Date" header field, whose use is now deprecated.

The Injection-Info header field contains information provided by the injecting news server as to how an article entered the Netnews system; it assists in tracing the article's true origin. It can also specify one or more addresses where complaints concerning the poster of the article may be sent.

injection-info = "Injection-Info:" SP [CFWS] path-identity [CFWS] *( ";" [CFWS] parameter ) [CFWS] CRLF

NOTE: The syntax of <parameter> (Section 5.1 of , as amended by ), taken in conjunction with the folding rules of (note: not RFC 2822), effectively allows [CFWS] to occur on either side of the "=" inside a <parameter>. The following table gives the <attribute> and the format of the <value> for each <parameter> defined for use with this header field. At most, one occurrence of each such <parameter> is allowed.

<attribute> format of <value> -------------------- ----------------- "posting-host" a <host-value> "posting-account" any <value> "logging-data" any <value> "mail-complaints-to" an <address-list>

where

host-value = dot-atom-text / IPv4address / IPv6address / (dot-atom-text ":" ( IPv4address / IPv6address ))

NOTE: Since any such <host-value> or <address-list> also has to be a syntactically correct <value>, it will usually be necessary to encapsulate it as a <quoted-string>, for example:

posting-host = "posting.example.com:192.0.2.1"

Other <attribute>s SHOULD NOT be used unless defined in extensions to this standard. If non-standards-based <attribute>s are used, they MUST begin with an "x-". Although comments and folding of whitespace are permitted throughout the Injection-Info header field, folding SHOULD NOT be used within any <parameter>. Folding SHOULD only occur before or after the ";" separating <parameter>s, and comments SHOULD only be used following the last <parameter>. NOTE: Some of this information has previously been sent in non-standardized header fields such as NNTP-Posting-Host, X-Trace, X-Complaints-To, and others. Once a news server generates an Injection-Info header field, it should have no need to send these non-standard header fields. The "posting-host" <parameter> specifies the Fully Qualified Domain Name (FQDN) and/or IP address (IPv4address or IPv6address) of the host from which the news server received the article. NOTE: If the "posting-host" <parameter> fails to deterministically identify the host (e.g., dynamic IP address allocation), the "posting-account" or "logging-data" <parameter> may provide additional information about the true origin of the article. The "posting-account" <parameter> identifies the source from which that news server received the article, in a notation that can be interpreted by the news server administrator. This notation can include any information the administrator deems pertinent. In order to limit the exposure of personal data, it SHOULD be given in a form that cannot be interpreted by other sites. However, to make it useful for rate limiting and abuse detection, two messages posted from the same source SHOULD have the same value of "posting-account", and two messages from different sources SHOULD have differing values of "posting-account". The exact definition of "source" is left to the discretion of the news server administrator. The "logging-data" <parameter> contains information (typically a session number or other non-persistent means of identifying a posting account) that will enable the true origin of the article to be determined by reference to logging information kept by the news server. The "mail-complaints-to" <parameter> specifies one or more mailboxes for sending complaints concerning the behavior of the poster of the article. It is a matter of local policy which of the above <parameter>s to include. Some pieces of information have privacy implications; this is discussed in .

The Organization header field is a short phrase identifying the poster's organization.

organization = "Organization:" SP unstructured CRLF

NOTE: There is no "s" in Organization.

The References header field is the same as that specified in Section 3.6.4 of , with the added restrictions detailed above in and those listed below: The updated <msg&nbhy;id> construct defined in MUST be used. Message identifiers MUST be separated with CFWS. Comments in CFWS between message identifiers can cause interoperability problems, so comments SHOULD NOT be generated but MUST be accepted.

references = "References:" SP [CFWS] msg-id *(CFWS msg-id) [CFWS] CRLF

The Summary header field is a short phrase summarizing the article's content.

summary = "Summary:" SP unstructured CRLF

The Supersedes header field contains a message identifier specifying an article to be superseded upon the arrival of this one. An article containing a Supersedes header field is equivalent to a "cancel" control message for the specified article, followed immediately by the new article without the Supersedes header field.

supersedes = "Supersedes:" SP *WSP msg-id *WSP CRLF

NOTE: There is no "c" in Supersedes. NOTE: The Supersedes header field defined here has no connection with the Supersedes header field that sometimes appears in Email messages converted from X.400 according to ; in particular, the syntax here permits only one <msg&nbhy;id> in contrast to the multiple <msg&nbhy;id>s in that Email version.

The User-Agent header field contains information about the user agent (typically a newsreader) generating the article, for statistical purposes and tracing of standards violations to specific software in need of correction. It is intended that this header field be suitable for use in Email.

user-agent = "User-Agent:" SP 1*product [CFWS] CRLF product = [CFWS] token [ [CFWS] "/" product-version ] product-version = [CFWS] token

This header field MAY contain multiple <product> tokens identifying the user agent and any subproducts that form a significant part of it, listed in order of their significance for identifying the application. NOTE: Some of this information has previously been sent in non-standardized header fields such as X-Newsreader, X-Mailer, X-Posting-Agent, X-Http-User-Agent, and others. Once a user agent generates a User-Agent header field, it should have no need to send these non-standard header fields. NOTE: describes a similar facility for the HTTP protocol. The Netnews article format differs in that "{" and "}" are allowed in tokens (<product> and <product-version>) and comments are permitted wherever whitespace is allowed.

The Xref header field indicates where an article was filed by the last news server to process it. User agents often use the information in the Xref header field to avoid multiple processing of crossposted articles.

xref = "Xref:" SP *WSP server-name 1*( FWS location ) *WSP CRLF server-name = path-identity location = newsgroup-name ":" article-locator article-locator = 1*( %x21-27 / %x29-3A / %x3C-7E ) ; US-ASCII printable characters ; except '(' and ';'

The <server-name> is included so that software can determine which news server generated the header field. The locations specify where the article is filed -- i.e., under which newsgroups (which may differ from those in the Newsgroups header field), and where under those newsgroups. The exact form of an <article-locator> is implementation-specific. NOTE: The traditional form of an <article-locator> (as required by ) is a decimal number, with articles in each newsgroup numbered consecutively starting from 1.

The header fields Date-Received, Posting-Version, and Relay-Version defined in , as well as Also-Control, Article-Names, Article-Updates, and See-Also defined in are declared obsolete. See the cited specification documents for further information on their original use. These header fields MUST NOT be generated and SHOULD be ignored.

The Lines header field indicates the number of lines in the <body> (as defined in ) of the article.

lines = "Lines:" SP *WSP 1*DIGIT *WSP CRLF

The line count is the number of CRLF separators in the <body>. Historically, this header field was used by the NNTP overview facility, but its use for this purpose is now deprecated. As a result, this header field is to be regarded as obsolescent, and it is likely to be removed entirely in a future version of this standard. All agents SHOULD ignore it and SHOULD NOT generate it.

Internationalization of Netnews article header fields and bodies is provided using the MIME mechanisms discussed in . Note that the generation of internationalized <newsgroup-name>s for use in header fields is not addressed in this document.

The Netnews article format specified in this document does not provide any security services, such as confidentiality, authentication of sender, or non-repudiation. Instead, such services need to be layered above, using such protocols as S/MIME or PGP/MIME (Pretty Good Privacy / MIME) , or below, using secure versions of news transport protocols. Additionally, several currently non-standardized protocols such as may be standardized in the near future. Message identifiers () in Netnews articles are required to be unique; articles may be refused (in server-to-server transfer) if the identifier has already been seen. If a malicious agent can predict the identifier of an article, it can preempt the article by posting its own article (possibly to a quite different group) with the same message identifier, thereby preventing the target article from propagating. Therefore, agents that generate message identifiers for Netnews articles SHOULD ensure that they are unpredictable. MIME security considerations are discussed in . Note that the full range of encodings allowed for parameters in and permits constructs that simple parsers may fail to parse correctly; examples of hard-to-parse constructs are:

Content-Type: multipart/mixed (; boundary=foo ; xyz=");bOuNdArY*=''next%20part(") Content-Type: multipart/digest; boundary (not=me) = ("yes ;-) simple (foo;bar") ; x-foo = xyzzy

Such deficiencies in parsing may be used as part of an attack. Further security considerations are discussed in .

IANA has registered the following header fields in the Permanent Message Header Field Repository, in accordance with the procedures set out in . Header field name: Also-Control Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 6.15) Header field name: Approved Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Archive Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Article-Names Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 6.17) Header field name: Article-Updates Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 6.18) Header field name: Comments Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.5) Header field name: Control Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Date Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.1) Header field name: Date-Received Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 2.2.4) Header field name: Distribution Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Expires Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Followup-To Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: From Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.2) Header field name: Injection-Date Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Injection-Info Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Keywords Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.5) Header field name: Lines Applicable protocol: netnews Status: deprecated Author/change controller: IETF Specification document(s): This document () Related information: (Section 8.1) Header field name: Message-ID Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Related information: (Section 3.6.4) Header field name: Newsgroups Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: NNTP-Posting-Date Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): none Header field name: NNTP-Posting-Host Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 3.4.1) Header field name: Organization Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Path Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Posting-Version Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 2.1.2) Header field name: References Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.4) Header field name: Relay-Version Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 2.1.1) Header field name: Reply-To Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.2) Header field name: See-Also Applicable protocol: netnews Status: obsoleted Author/change controller: IETF Specification document(s): (Section 6.16) Header field name: Sender Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.2) Header field name: Subject Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document (), (Section 3.6.5) Header field name: Summary Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: Supersedes Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Header field name: User-Agent Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document () Related information: (Section 14.43) Header field name: Xref Applicable protocol: netnews Status: standard Author/change controller: IETF Specification document(s): This document ()

&rfc2045; &rfc2046; &rfc2047; &rfc2049; &rfc2119; &rfc2183; &rfc2231; &rfc2822; &rfc5322; &rfc3282; &rfc3986; &rfc5234; &rfc0822; &rfc0850; &rfc1036; &rfc2156; &rfc2616; &rfc2980; &rfc3156; &rfc3696; &rfc3851; &rfc3864; &rfc3977; International Organization for Standardization

As this document is the result of an eight-year effort, the number of people that have contributed to its content are too numerous to mention individually. Many thanks go out to all past and present members of the USEFOR Working Group of the Internet Engineering Task Force (IETF) and its accompanying mailing list.

This appendix contains a list of changes that have been made in the Netnews article format from earlier standards, specifically . The conventions for parenthesis-enclosed <comment>s in header fields are supported in all newly defined header fields and in header fields inherited from . They are, however, still disallowed for performance and/or compatibility reasons in the Control, Distribution, Followup-To, Lines, Message-ID, Newsgroups, Path, Supersedes, and Xref header fields. Multiple addresses are allowed in the From header field. [FWS] is permitted in Newsgroups header fields. An enhanced syntax for the Path header field enables the injection point of, and the route taken by, an article to be determined with more precision. Only one (1) message identifier is allowed in the Supersedes header field. MIME is recognized as an integral part of Netnews. There is a new Injection-Date header field to make the rejection of stale articles more precise and to minimize spurious rejections. There are several new optional header fields defined, notably Archive, Injection-Info, and User-Agent, leading to increased functionality. Certain header fields, notably Lines, have been deprecated or made obsolete (). The convention to interpret subjects starting with the word "cmsg" as a control message was removed. There are numerous other small changes, clarifications, and enhancements.

This appendix lists the differences between the syntax allowed by the Netnews article format (this document) as compared to the Internet Message Format, as specified in . The Netnews article format is a strict subset of the Internet Message Format; all Netnews articles conform to the syntax of . The following restrictions are important: A SP (space) is REQUIRED after the colon (':') following a header field name. A more restricted syntax of <msg&nbhy;id> (to be used by the Message-ID, References, and Supersedes header fields) is defined. The length of a <msg&nbhy;id> MUST NOT exceed 250 octets. Comments are not allowed in the Message-ID header field. The CFWS between <msg&nbhy;id>s in the References header field is not optional. It is legal for a parser to reject obsolete syntax, except that: The <obs-phrase> construct MUST be accepted. The obsolete <zone> "GMT" MUST be accepted within a <date&nbhy;time>. Every line of a header field body (including the first and any that are subsequently folded) MUST contain at least one non-whitespace character. This means that an empty header field body is illegal.