Standards & Compliance

What is IETF?

Also known as: Internet Engineering Task Force

Definition

The Internet Engineering Task Force (IETF) is an open international community of network designers, operators, vendors, and researchers that develops voluntary internet standards, primarily through working groups and the RFC document series.

The Internet Engineering Task Force (IETF) is the principal standards development organization for the internet. It produces technical specifications and standards that define how data travels across networks, ensuring interoperability among systems from different vendors. The IETF operates without formal membership; anyone with the technical expertise and time can participate by joining mailing lists and attending meetings.

Work in the IETF is organized into working groups, each focused on a specific topic such as routing, security, or transport protocols. A working group produces documents that, after rough consensus and thorough review, are approved by the Internet Engineering Steering Group (IESG) and published as Requests for Comments (RFCs). The RFC series, which dates back to 1969, includes both standards-track documents (e.g., RFC 793 for TCP) and informational documents. The IETF's principles are codified in RFC 3935, 'A Mission Statement for the IETF'.

Unlike formal bodies like the International Telecommunication Union (ITU), the IETF relies on volunteer effort and operates under a lightweight, bottom-up process. Key components include the Internet Architecture Board (IAB), which provides architectural oversight, and the Internet Assigned Numbers Authority (IANA), which manages protocol parameter assignments. The IETF holds three meetings per year, but most technical work is done asynchronously on mailing lists. Its most famous standards include TCP/IP, HTTP, TLS, and DNS.

Key facts

  • Founded in 1986, succeeding earlier US government-funded network coordination groups.
  • Produces voluntary standards adopted globally; no single organization can veto a standard.
  • Standards are published as RFCs, a series that has included over 9,000 documents.
  • Working groups require rough consensus, not unanimous approval.
  • The IETF does not charge membership fees; participation is open to any individual.

How it works in practice

When a browser connects to a web server, the underlying HTTP (RFC 9110), TLS (RFC 8446), and TCP (RFC 9293) protocols were all developed within IETF working groups. A vendor implementing these protocols can be confident they will interoperate with other implementations.

Related terms

RFC Internet Architecture Board (IAB) Internet Engineering Steering Group (IESG) Internet Assigned Numbers Authority (IANA) Working Group

References

More in Standards & Compliance

BCP 14

BCP 14 defines the normative meaning of MUST, SHOULD, MAY, and related keywords used in RFCs to specify requirement levels in Internet standards.

BCP 38

BCP 38 (RFC 2827) is a Best Current Practice that defines ingress filtering to prevent packets with spoofed source IP addresses from leaving a network.

GDPR

The General Data Protection Regulation (GDPR) is an EU law that governs the processing of personal data and applies to any organization worldwide that handles data of EU residents.

HIPAA

HIPAA is a 1996 US federal law that sets national standards for protecting sensitive patient health information from disclosure without consent or knowledge.

IANA

IANA is the function that coordinates global IP address allocation, manages the DNS root zone, and assigns protocol numbers used in Internet standards, ensuring unique identifiers across the network.

ICANN

ICANN is a nonprofit organization that coordinates the Domain Name System (DNS) root zone, accredits registrars, and oversees the Internet Assigned Numbers Authority (IANA) functions for global unique identifiers.

ISO 27001

ISO 27001 is an international standard specifying requirements for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS).

ITU-T

ITU-T is the United Nations agency that sets global telecommunications standards, including X.509 certificates and G-series video codecs.

PCI DSS

PCI DSS is the mandatory security standard for any organization that stores, processes, or transmits credit card data, enforced by the payment card brands.

Regional Internet Registry

A Regional Internet Registry (RIR) is an organization that manages the allocation and registration of Internet number resources (IP addresses and Autonomous System Numbers) within a specific geographic region.

Who Is Online

In total there are 60 users online: 0 registered, 53 guests and 7 bots.

Most users ever online was 5,555 on 17 Jul 2026, 3:23 am.

Bots: AhrefsBot Applebot Baiduspider Other Bot Other Crawler PetalBot SemrushBot

Users active in the past 15 minutes. Total registered members: 369