<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.30 (Ruby 3.4.7) -->
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" ipr="trust200902" docName="draft-linker-diem-adem-dns-00" category="info" consensus="true" submissionType="IETF" tocInclude="true" sortRefs="true" symRefs="true" version="3">
  <!-- xml2rfc v2v3 conversion 3.31.0 -->
  <front>
    <title abbrev="ADEM over DNS">ADEM - Distribution and Discovery over DNS</title>
    <seriesInfo name="Internet-Draft" value="draft-linker-diem-adem-dns-00"/>
    <author fullname="Felix Linker">
      <organization/>
      <address>
        <email>linkerfelix@gmail.com</email>
      </address>
    </author>
    <date year="2026" month="January" day="15"/>
    <area>Applications and Real-Time</area>
    <workgroup>Digital Emblems</workgroup>
    <keyword>next generation</keyword>
    <keyword>unicorn</keyword>
    <keyword>sparkling distributed ledger</keyword>
    <abstract>
      <?line 37?>

<t>TODO Abstract</t>
    </abstract>
    <note removeInRFC="true">
      <name>About This Document</name>
      <t>
        The latest revision of this draft can be found at <eref target="https://adem-wg.github.io/adem-dns-spec/draft-linker-diem-adem-dns.html"/>.
        Status information for this document may be found at <eref target="https://datatracker.ietf.org/doc/draft-linker-diem-adem-dns/"/>.
      </t>
      <t>
        Discussion of this document takes place on the
        Digital Emblems Working Group mailing list (<eref target="mailto:diem@ietf.org"/>),
        which is archived at <eref target="https://mailarchive.ietf.org/arch/browse/diem"/>.
        Subscribe at <eref target="https://www.ietf.org/mailman/listinfo/diem/"/>.
      </t>
      <t>Source for this draft and an issue tracker can be found at
        <eref target="https://github.com/adem-wg/adem-dns-spec"/>.</t>
    </note>
  </front>
  <middle>
    <?line 42?>

<section anchor="introduction">
      <name>Introduction</name>
      <t>The ADEM Core Specification specifies how a set of <em>tokens</em>, encoded as JSON Web Signatures (JWSs) <xref target="RFC7515"/>, can be used as a digital emblem to signal that digital assets enjoy specific protections under International Humanitarian Law (IHL).
This document describes a DNS-based distribution and discovery for ADEM tokens.</t>
    </section>
    <section anchor="conventions-and-definitions">
      <name>Conventions and Definitions</name>
      <t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>
      <?line -18?>

</section>
    <section anchor="dns-distribution">
      <name>DNS Distribution</name>
      <t>Given a set of tokens containing exactly one emblem and zero or more associated endorsements, issuers can distribute this set via DNS TXT records <xref target="RFC1035"/>, as follows.</t>
      <t>For each such set, issuers <bcp14>MAY</bcp14> choose a unique <em>identifier</em> string.
If multiple sets of tokens are associated with a given domain name, issuers <bcp14>SHOULD</bcp14> choose such a string.</t>
      <t>Each token is distributed as its own TXT record, which includes a key and a value.
The value encodes the token in JWT compact serialization.</t>
      <t>Each record's key <bcp14>MUST</bcp14> be formatted as:</t>
      <artwork><![CDATA[
key := "adem" [ "-" identifier ]

identifier := CHARACTER-NO-HYPEN+

record := key "=" value
]]></artwork>
      <t><tt>CHARACTER-NO-HYPEN</tt> is any printable ASCII character as specified in <xref target="RFC0020"/> except for <tt>"-"</tt>.
If present, <tt>identifier</tt> <bcp14>MUST</bcp14> coincide with the string identifying the token's set.</t>
    </section>
    <section anchor="security-considerations">
      <name>Security Considerations</name>
      <t>TODO Security</t>
    </section>
    <section anchor="iana-considerations">
      <name>IANA Considerations</name>
      <t>This document has no IANA actions.</t>
    </section>
  </middle>
  <back>
    <references anchor="sec-combined-references">
      <name>References</name>
      <references anchor="sec-normative-references">
        <name>Normative References</name>
        <reference anchor="RFC2119">
          <front>
            <title>Key words for use in RFCs to Indicate Requirement Levels</title>
            <author fullname="S. Bradner" initials="S." surname="Bradner"/>
            <date month="March" year="1997"/>
            <abstract>
              <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="2119"/>
          <seriesInfo name="DOI" value="10.17487/RFC2119"/>
        </reference>
        <reference anchor="RFC8174">
          <front>
            <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
            <author fullname="B. Leiba" initials="B." surname="Leiba"/>
            <date month="May" year="2017"/>
            <abstract>
              <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="8174"/>
          <seriesInfo name="DOI" value="10.17487/RFC8174"/>
        </reference>
        <reference anchor="RFC1035">
          <front>
            <title>Domain names - implementation and specification</title>
            <author fullname="P. Mockapetris" initials="P." surname="Mockapetris"/>
            <date month="November" year="1987"/>
            <abstract>
              <t>This RFC is the revised specification of the protocol and format used in the implementation of the Domain Name System. It obsoletes RFC-883. This memo documents the details of the domain name client - server communication.</t>
            </abstract>
          </front>
          <seriesInfo name="STD" value="13"/>
          <seriesInfo name="RFC" value="1035"/>
          <seriesInfo name="DOI" value="10.17487/RFC1035"/>
        </reference>
        <reference anchor="RFC0020">
          <front>
            <title>ASCII format for network interchange</title>
            <author fullname="V.G. Cerf" initials="V.G." surname="Cerf"/>
            <date month="October" year="1969"/>
          </front>
          <seriesInfo name="STD" value="80"/>
          <seriesInfo name="RFC" value="20"/>
          <seriesInfo name="DOI" value="10.17487/RFC0020"/>
        </reference>
      </references>
      <references anchor="sec-informative-references">
        <name>Informative References</name>
        <reference anchor="RFC7515">
          <front>
            <title>JSON Web Signature (JWS)</title>
            <author fullname="M. Jones" initials="M." surname="Jones"/>
            <author fullname="J. Bradley" initials="J." surname="Bradley"/>
            <author fullname="N. Sakimura" initials="N." surname="Sakimura"/>
            <date month="May" year="2015"/>
            <abstract>
              <t>JSON Web Signature (JWS) represents content secured with digital signatures or Message Authentication Codes (MACs) using JSON-based data structures. Cryptographic algorithms and identifiers for use with this specification are described in the separate JSON Web Algorithms (JWA) specification and an IANA registry defined by that specification. Related encryption capabilities are described in the separate JSON Web Encryption (JWE) specification.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7515"/>
          <seriesInfo name="DOI" value="10.17487/RFC7515"/>
        </reference>
      </references>
    </references>
    <?line 104?>

<section numbered="false" anchor="acknowledgments">
      <name>Acknowledgments</name>
      <t>TODO acknowledge.</t>
    </section>
  </back>
  <!-- ##markdown-source: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-->

</rfc>
