]> Apple Inc.

1 Infinite Loop Cupertino CA 95014 USA cyrus@daboo.name http://www.apple.com/

Applications alarms calendaring iCalendar This document defines a set of new properties for iCalendar data as well as extending the use of some existing properties to the entire iCalendar object.

The iCalendar data format is used to represent calendar data and is used with iTIP to handle scheduling operations between calendar users. iCalendar is in widespread use, and in accordance with provisions in that specification, extension elements have been added by various vendors to the data format in order to support and enhance capabilities. This specification collects a number of these ad-hoc extensions and uses the new IANA registry capability defined in to register standard variants with clearly defined definitions and semantics. In addition, some new elements are introduced for features that vendors have recently been requesting.

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in . The notation used in this memo is the ABNF notation of as used by iCalendar. Any syntax elements shown below that are not explicitly defined in this specification come from iCalendar.

iCalendar defines properties which can have different value types indicated by a "VALUE" parameter. The definition of a property specifies a "default" value type that is assumed to be used when no "VALUE" parameter is present. However, this poses a problem to iCalendar parser/generator software that does not know about the default values for new properties. For example, if a new property "FOO" were defined with a default value type of URI, and a URI value with a comma was used, an iCalendar generator not aware of this fact would likely treat the property value as "TEXT" and apply backslash escaping to the comma in the value, effectively making it an invalid URI value. To avoid this problem, this specification recommends that all properties not defined in , always include a "VALUE" parameter, if the type is other than "TEXT". i.e., in the example above, the "FOO" property would have a "VALUE=URI" parameter. This allows iCalendar parser/generator software to track the correct types of unknown properties. New properties defined in this specification use the term "no default" in the "Value Type" definition to indicate that the "VALUE" parameter has to be included.

The following changes to the syntax defined in iCalendar are made here. New elements are defined in subsequent sections.

NAME This property specifies the name of the calendar. TEXT IANA, non-standard, alternate text representation, and language property parameters can be specified on this property. This property can be specified multiple times in an iCalendar object. However, each property MUST represent the name of the calendar in a different language. This property is used to specify a name of the iCalendar object that can be used by calendar user agents when presenting the calendar data to a user. Whilst a calendar only has a single name, multiple language variants can be specified by including this property multiple times with different "LANGUAGE" parameter values on each. This property is defined by the following notation:

The following is an example of this property:

This specification modifies the definition of the "DESCRIPTION" property to allow it to be defined on an iCalendar object. The following additions are made to the definition of this property, originally specified in Section 3.8.1.5 of . This property specifies the description of the calendar. This property can be specified multiple times in an iCalendar object. However, each property MUST represent the description of the calendar in a different language. This property is used to specify a lengthy textual description of the iCalendar object that can be used by calendar user agents when describing the nature of the calendar data to a user. Whilst a calendar only has a single description, multiple language variants can be specified by including this property multiple times with different "LANGUAGE" parameter values on each.

This specification modifies the definition of the "UID" property to allow it to be defined on an iCalendar object. The following additions are made to the definition of this property, originally specified in Section 3.8.4.7 of . This property specifies the persistent, globally unique identifier for the iCalendar object. This can be used, for example, to identify duplicate calendar streams that a client may have been given access to. It can be used in conjunction with the "LAST-MODIFIED" property also specified on the "VCALENDAR" object, to identify the most recent version of a calendar. This property can be specified once in an iCalendar object. The description of the "UID" property in contains some recommendations on how the value can be constructed. In particular, it suggests use of host names, IP addresses, and domain names to construct the value. However, this is no longer considered good practice, particularly from a security and privacy standpoint, since use of such values can leak key information about a calendar user, or their client and network environment. This specification updates by stating that "UID" values MUST NOT include any data that might identify a user, host, domain, or any other security or privacy sensitive information. It is RECOMMENDED that calendar user agents now generate "UID" values that are hex-encoded random UUID values as defined in Sections 4.4 and 4.5 of . The following is an example of such a property value:

Additionally, if calendar user agents choose to use other forms of opaque identifiers for the "UID" value, they MUST have a length less than 255 octets, and MUST conform to the "iana-token" ABNF syntax defined in Section 3.1 of .

This specification modifies the definition of the "LAST-MODIFIED" property to allow it to be defined on an iCalendar object. The following additions are made to the definition of this property, originally specified in Section 3.8.7.3 of . This property specifies the date and time that the information associated with the calendar was last revised. This property can be specified once in an iCalendar object.

This specification modifies the definition of the "URL" property to allow it to be defined on an iCalendar object. The following additions are made to the definition of this property, originally specified in Section 3.8.4.6 of . This property may be used to convey a location where a more dynamic rendition of the calendar information can be found. This property can be specified once in an iCalendar object.

This specification modifies the definition of the "CATEGORIES" property to allow it to be defined on an iCalendar object. The following additions are made to the definition of this property, originally specified in Section 3.8.1.2 of . This property defines the categories for an entire calendar. This property can be specified multiple times in an iCalendar object. When multiple properties are present, the set of categories that apply to the iCalendar object are the union of all the categories listed in each property value.

REFRESH-INTERVAL This property specifies a suggested minimum interval for polling for changes of the calendar data from the original source of that data. DURATION - no default IANA and non-standard property parameters can be specified on this property. This property can be specified once in an iCalendar object. This property specifies a positive duration that gives a suggested minimum polling interval for checking for updates to the calendar data. The value of this property SHOULD be used by calendar user agents to limit the polling interval for calendar data updates to the minimum interval specified. This property is defined by the following notation:

The following is an example of this property:

SOURCE This property identified a URI where calendar data can be refreshed from. URI - no default IANA and non-standard property parameters can be specified on this property. This property can be specified once in an iCalendar object. This property identifies a location where a client can retrieve updated data for the calendar. Clients SHOULD honor any specified "REFRESH-INTERVAL" value when periodically retrieving data. Note that this property differs from the "URL" property in that "URL" is meant to provide an alternative representation of the calendar data, rather than the original location of the data. This property is defined by the following notation:

The following is an example of this property:

COLOR This property specifies a color used for displaying the calendar, event, todo, or journal data. TEXT IANA and non-standard property parameters can be specified on this property. This property can be specified once in an iCalendar object, or "VEVENT", "VTODO", or "VJOURNAL" calendar components. This property specifies a color that clients MAY use when presenting the relevant data to a user. Typically this would appear as the "background" color of events or tasks. The value is a case-insensitive color name taken from the CSS3 set of names, defined in Section 4.3 of . This property is defined by the following notation:

The following is an example of this property:

IMAGE This property specifies an image associated with the calendar or a calendar component. URI or BINARY - no default. The value MUST refer to or be data with a media type of "image". IANA, non-standard, display, inline encoding, and value data type property parameters can be specified on this property. The format type parameter can be specified on this property and is RECOMMENDED for inline binary encoded content information. This property can be specified multiple times in an iCalendar object, or "VEVENT", "VTODO", or "VJOURNAL" calendar components. This property specifies an image for an iCalendar object or a calendar component via a uri or directly with inline data that can be used by calendar user agents when presenting the calendar data to a user. Multiple properties MAY be used to specify alternative sets of images with, for example, varying media subtypes, resolutions or sizes. When multiple properties are present, calendar user agents SHOULD display only one of them, picking one that provides the most appropriate image quality, or display none. The "DISPLAY" parameter is used to indicate the intended display mode for the image. The "ALTREP" parameter, defined in , can be used to provide a "clickable" image where the URI in the parameter value can be "launched" by a click on the image in the calendar user agent. This property is defined by the following notation:

The following is an example of this property:

CONFERENCE This property specifies information for accessing a conferencing system. URI - no default. IANA, non-standard, feature, and label property parameters can be specified on this property. This property can be specified multiple times in a "VEVENT" or "VTODO" calendar component. This property specifies information for accessing a conferencing system for attendees of a meeting or task. This might be for a telephone-based conference number dial-in with access codes included (such as a tel: URI or a sip: or sips: URI), or it might be for a web-based video chat (such as an http: or https: URI), or a URI for an instant messaging group chat room (such as an xmpp: URI). If a specific URI for a conferencing system is not available, a data: URI containing a text description can be used. A conference system can be a bi-directional communication channel, or a uni-directional "broadcast feed". The "FEATURE" property parameter is used to describe the key capabilities of the conference system to allow a client to choose the ones that give the required level of interaction from a set of multiple properties. The "LABEL" property paramater is used to convey additional details on the use of the URI. For example, the URIs or access codes for the moderator and attendee of a teleconference system could be different, and the "LABEL" property parameter could be used to "tag" each "CONFERENCE" property to indicate which is which. The "LANGUAGE" property parameter can be used to specify the language used for text values used with this property (as per Section 3.2.10 of . This property is defined by the following notation:

The following are examples of this property:

DISPLAY To specify different ways in which an image for a calendar or component can be displayed. This property parameter is defined by the following notation:

This property parameter MAY be specified on "IMAGE" properties. In the absence of this parameter, the default value "BADGE" MUST be used. The value determines how a client ought to present an image supplied in iCalendar data to the user. Values for this parameter are registered with IANA as per . New values can be added to this registry following the procedure outlined in Section 8.2.1 of . Servers and clients MUST handle x-name and iana-token values they don't recognize by not displaying any image at all.

EMAIL To specify an email address that is used to identify or contact an organizer or attendee. This property parameter is defined by the following notation:

This property parameter MAY be specified on "ORGANIZER" or "ATTENDEE" properties. This property can be used in situations where the calendar user address value of "ORGANIZER" and "ATTENDEE" properties is not likely to be an identifier that recipients of scheduling messages could use to match the calendar user with, for example, an address book entry. The value of this property is an email address that can easily be matched by recipients. Recipients can also use this value as an alternative means of contacting the calendar user via email. If a recipient's calendar user agent allows the recipient to save contact information based on the "ORGANIZER" or "ATTENDEE" properties, those calendar user agents SHOULD use any "EMAIL" property parameter value for the email address of the contact over any mailto: calendar user address specified as the value of the property. Calendar user agents SHOULD NOT include an "EMAIL" property parameter when its value matches the calendar user address specified as the value of the property.

FEATURE To specify a feature or features of a conference or broadcast system. This property parameter is defined by the following notation:

This property parameter MAY be specified on the "CONFERENCE" property. Multiple values can be specified. The "MODERATOR" value is used to indicate that the property value is specific to the owner/initiator of the conference and contains a URI that "activates" the system (e.g., a "moderator" access code for a phone conference system that is different from the "regular" access code).

LABEL To provide a human readable label. This property parameter is defined by the following notation:

This property parameter MAY be specified on the "CONFERENCE" property. It is anticipated that other extensions to iCalendar will re-use this property parameter on new properties that they define. As a result, clients MUST expect to find this property parameter present on many different properties. It provides a human readable label that can be presented to calendar users to allow them to discriminate between properties which might be similar, or provide additional information for properties that are not self-describing. The "LANGUAGE" property parameter can be used to specify the language of the text in the parameter value (as per Section 3.2.10 of .

Several of the new properties or parameters defined by this specification allow reference to "external" URIs. Care MUST be taken when accessing data at external URIs as malicious content could be present. Clients SHOULD ensure that suitable permission is granted by calendar users before such URIs are dereferenced. The "REFRESH-INTERVAL" property could be used by an attacker to make a client carry out rapid requests to the server hosting the calendar, by specifying a very short duration (e.g., one second). This could lead to resource consumption on the client or server, and denial-of-service attacks against the server. Clients MUST ensure that they throttle requests to the server to a reasonable rate. In most cases, updating a public calendar once per day would suffice. If the "REFRESH-INTERVAL" is any less than that, clients SHOULD warn the calendar user and allow them to override it with a longer value. The "CONFERENCE" property can include a "FEATURE" property parameter with a "MODERATOR" value. In some cases the access code used by the owner/initiator of a conference might be private to an individual and clients and servers MUST ensure that such properties are not sent to attendees of a scheduled component, or sharees of a shared component. Both the "COLOR" and "IMAGE" properties are likely to be used by calendar users to express their own personal view of the calendar data. In addition, these properties could be used by attackers to produce a confusing display in a calendar user agent. When such properties are encountered in calendar data that has come from other calendar users (e.g., via a scheduling message, "public" calendar subscription, shared calendar etc), it is advisable for the client to give the receiving calendar user the option to remove (or adjust) these properties as the data is imported into their calendar system. This specification changes the recommendations on how "UID" property values are constructed to minimize leaking any information that might be security sensitive. Security considerations in , and MUST also be adhered to.

Several of the new properties or parameters defined by this specification allow reference to "external" URIs. Access to those URIs could be tracked, leading to loss of privacy. Clients SHOULD ensure that suitable permission is granted by calendar users before such URIs are dereferenced. In particular, calendar publishers wishing to help protect the privacy of their subscribers MUST use HTTP with Transport Layer Security ("https:" URIs instead of "http:" URIs) for access to calendar data or ancillary data such as images. In general, users have to rely on the privacy policies of any conferencing system being accessed via the "CONFERENCE" property, for their own privacy protection. It is entirely possible for such systems to uniquely identify and log the activity and participation (or not) of calendar users in the conference. Calendar user agents SHOULD track which conferencing systems are used and warn users the first time a new one is about to be used. This is particularly important if the client automatically "dials in" to the conference when the event start time occurs. By giving different calendar users different values for the "REFRESH-INTERVAL" property, it is possible for a publisher of calendar data to uniquely identify each refresh from each calendar users' clients, and thereby track user activity and IP address over time. To address this, clients SHOULD add or subtract some random amount of time from the published "REFRESH-INTERVAL" value when doing actual refreshes. This specification changes the recommendations on how "UID" property values are constructed to minimize leaking any information that might be privacy sensitive. Privacy considerations in , and MUST also be adhered to.

This document defines the following new iCalendar properties to be added to the registry defined in Section 8.3.2 of : Property Status Reference NAME Current RFCXXXX, DESCRIPTION Current RFC5545 Section 3.8.1.5, RFCXXXX, UID Current RFC5545 Section 3.8.4.7, RFCXXXX, LAST-MODIFIED Current RFC5545 Section 3.8.7.3, RFCXXXX, URL Current RFC5545 Section 3.8.4.6, RFCXXXX, CATEGORIES Current RFC5545 Section 3.8.1.2, RFCXXXX, REFRESH-INTERVAL Current RFCXXXX, SOURCE Current RFCXXXX, COLOR Current RFCXXXX, IMAGE Current RFCXXXX, CONFERENCE Current RFCXXXX,

This document defines the following new iCalendar property parameters to be added to the registry defined in Section 8.3.3 of : Property Parameter Status Reference DISPLAY Current RFCXXXX, EMAIL Current RFCXXXX, FEATURE Current RFCXXXX, LABEL Current RFCXXXX,

Two new IANA registries for iCalendar elements have been added. Additional codes MAY be used, provided the process described in Section 8.2.1 of is used to register them, using the template in Section 8.2.6 of .

The following table has been used to initialize the Display Types Registry. Display Type Status Reference BADGE Current RFCXXXX, GRAPHIC Current RFCXXXX, FULLSIZE Current RFCXXXX, THUMBNAIL Current RFCXXXX,

The following table has been used to initialize the Feature Types Registry. Feature Type Status Reference AUDIO Current RFCXXXX, CHAT Current RFCXXXX, FEED Current RFCXXXX, MODERATOR Current RFCXXXX, PHONE Current RFCXXXX, SCREEN Current RFCXXXX, VIDEO Current RFCXXXX,

Thanks to the following for feedback: Bernard Desruisseaux, Mike Douglass, Lucia Fedorova, Ken Murchison, Arnaud Quillaud, and Dave Thewlis. This specification came about via discussions at the Calendaring and Scheduling Consortium.

&rfc2119; &rfc4122; &rfc5234; &rfc5545; &rfc5546; &W3C.REC-css3-color-20110607; &rfc2397; &rfc3261; &rfc3966; &rfc5122; &rfc7230;

Changes in draft-ietf-calext-extensions-05: IESG: Fixed IANA section to properly define the two new registries. IESG: Added xmpp, sip, and sips as example URIs for CONFERENCE. IESG: Added languageparam to CONFERENCE and also indicated it can appear alongside LABEL. IESG: Changed SHOULD -> MUST for clients to expect LABEL. IESG: Privacy: use https: instead of http:. IESG: Privacy: text on tracking via CONFERENCE. IESG: Privacy: text on tracking via REFRESH-INTERVAL. IESG: Modified UID value generation to be stricter about what is allowed.. IESG: Other editorial tweaks. Removed CONFERENCE from VJOURNAL ABNF. Changes in draft-ietf-calext-extensions-04: SECDIR: Added new items to Security Considerations and added Privacy Considerations. SECDIR: fixed missing conference item in component ABNF definitions. SECDIR: editorial fixes. Changes in draft-ietf-calext-extensions-03: AD: fixed =/ ABNF syntax. AD: added description for CATEGORIES. AD: Removed extra / in image ABNF. AD: Fixed VALUE=URI in image ABNF. AD: Mention https in addition to http. Changed all examples to use https: AD: fixed DISPLAY ABNF syntax. Changes in draft-ietf-calext-extensions-02: Refresh expired draft - no changes. Changes in draft-ietf-calext-extensions-01: Clarified difference between SOURCE and URL properties. Use labelparam not infoparam. Changes in draft-ietf-calext-extensions-00: Document renamed after WG adoption. Fixed tel: URI reference. Changes in draft-daboo-icalendar-extensions-09: Re-instated a trimmed down version of the CONFERENCE property after serious interest expressed by implementors. LABEL property used instead of INFO - appropriated from another iCalendar draft. Changes in draft-daboo-icalendar-extensions-08: Trimmed down the display values to a minimal set. Changes in draft-daboo-icalendar-extensions-07: Removed ALTURI parameter - now use ALTREP. Removed VALID property. Removed TIMEZONE-ID property. Added FULLSIZE and THUMBNAIL display values. Added EMAIL property parameter. Added LAST-MODIFIED property for use with VCALENDAR. Added CATEGORIES property for use with VCALENDAR. URL use now aligned with 5545. Added SOURCE property. COLOR now uses CSS3 values. Changes in draft-daboo-icalendar-extensions-06: Removed BROADCAST/CONFERENCE properties and related parameters. Changes in draft-daboo-icalendar-extensions-05: Added section with recommendation on handling extension properties. Added VALID property. Changes in draft-daboo-icalendar-extensions-04: TZID changed to new property TIMEZONE-ID. Minor formal syntax changes. Changes in draft-daboo-icalendar-extensions-03: Dropped CALENDAR- prefix DESCRIPTION, UID and TZID now based on existing RFC5545 properties COLOR now on both the calendar and component level IMAGE now on both the calendar and component level Added FEATURE and REGION parameters to CONFERENCE property Added ALTURI parameter to IMAGE property Added FEED value to FEATURE parameter Added BROADCAST property and clarified that CONFERENCE is for bi-direction channels and BROADCAST is for uni-directional. Changes in draft-daboo-icalendar-extensions-02: Minor wording changes. Interval is now described as the "minimum interval". Added CONFERENCE property and INFO parameter. Changes in draft-daboo-icalendar-extensions-01: Fixed DISPLAY parameter handling of x- and iana tokens to state that clients ignore the image if the token is not recognized. Allow language variants for CALENDAR-NAME and CALENDAR-DESCRIPTION. Added registry for DISPLAY values.