Topzle Topzle

Well-known URI

Updated: Wikipedia source

Well-known URI

A well-known URI is a Uniform Resource Identifier for URL path prefixes that start with /.well-known/. They are implemented in webservers so that requests to the servers for well-known services or information are available at URLs consistent well-known locations across servers.

Tables

· List of well-known URIs
acme-challenge
acme-challenge
URI suffix
acme-challenge
Description
Automated Certificate Management Environment (ACME)
Date of IANA registration
2019-03-01
agent-card.json
agent-card.json
URI suffix
agent-card.json
Description
Details for an A2A Server's Agent Card
ai-plugin.json
ai-plugin.json
URI suffix
ai-plugin.json
Description
Manifest for a ChatGPT plugin
apple-app-site-association
apple-app-site-association
URI suffix
apple-app-site-association
Description
An Apple service that enables secure data exchange between iOS and a website
apple-developer-merchantid-domain-association
apple-developer-merchantid-domain-association
URI suffix
apple-developer-merchantid-domain-association
Description
Apple Pay
appspecific
appspecific
URI suffix
appspecific
Description
Used by some application to get some informations about the application (e.g chrome devtools: appspecific/com.chrome.devtools.json)
ashrae
ashrae
URI suffix
ashrae
Description
BACnet – A data communication protocol for building automation and control networks
Date of IANA registration
2016-01-22
assetlinks.json
assetlinks.json
URI suffix
assetlinks.json
Description
AssetLinks protocol used to identify one or more digital assets (such as web sites or mobile apps) that are related to the hosting web site in some fashion
Date of IANA registration
2015-09-28
atproto-did
atproto-did
URI suffix
atproto-did
Description
Handle-to-DID resolution for AT Protocol
autoconfig/mail
autoconfig/mail
URI suffix
autoconfig/mail
Description
Mozilla Thunderbird mail autoconfiguration service
browserid
browserid
URI suffix
browserid
Description
Mozilla Persona
caldav
caldav
URI suffix
caldav
Description
Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV)
carddav
carddav
URI suffix
carddav
Description
Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV)
change-password
change-password
URI suffix
change-password
Description
Helps password managers find the URL for changing client account passwords
coap
coap
URI suffix
coap
Description
CoAP (Constrained Application Protocol) over TCP, TLS, and WebSockets
Date of IANA registration
2017-12-22
com.apple.remotemanagement
com.apple.remotemanagement
URI suffix
com.apple.remotemanagement
Description
Apple-Account–based user enrollment for mobile device management
com.chrome.devtools.json
com.chrome.devtools.json
URI suffix
com.chrome.devtools.json
Description
Automatic Workspace Folders - Chromium DevTools Ecosystem Guide for Web_development_tools
core
core
URI suffix
core
Description
Constrained RESTful Environments (CoRE) Link Format
csvm
csvm
URI suffix
csvm
Description
CSV metadata, Model for Tabular Data and Metadata on the Web
Date of IANA registration
2015-09-28
dat
dat
URI suffix
dat
Description
Links domain to Dat identifier, used by Beaker web browser
did.json
did.json
URI suffix
did.json
Description
did:web Decentralized Identifiers (DIDs) for the Web
discord
discord
URI suffix
discord
Description
Domain verification for Discord account connection
dnt
dnt
URI suffix
dnt
Description
Site-wide tracking status resource
Date of IANA registration
2015-08-19
dnt-policy.txt
dnt-policy.txt
URI suffix
dnt-policy.txt
Description
A privacy-friendly Do Not Track (DNT) Policy
Date of IANA registration
2015-08-19
est
est
URI suffix
est
Description
Enrollment over Secure Transport (EST)
Date of IANA registration
2013-08-16
genid
genid
URI suffix
genid
Description
Resource Description Framework (RDF) Skolem IRIs
Date of IANA registration
2012-11-15
gpc.json
gpc.json
URI suffix
gpc.json
Description
Global Privacy Control (GPC)
hoba
hoba
URI suffix
hoba
Description
HTTP Origin-Bound Authentication (HOBA)
Date of IANA registration
2015-01-20
host-meta
host-meta
URI suffix
host-meta
Description
Web Host Metadata
host-meta.json
host-meta.json
URI suffix
host-meta.json
Description
Web Host Metadata
http-opportunistic
http-opportunistic
URI suffix
http-opportunistic
Description
Opportunistic Security for HTTP/2
Date of IANA registration
2017-03-20
keybase.txt
keybase.txt
URI suffix
keybase.txt
Description
Used by the Keybase project to identify a proof that one or more people whose public keys may be retrieved using the Keybase service have administrative control over the origin server from which it is retrieved
Date of IANA registration
2014-04-08
keyparc
keyparc
URI suffix
keyparc
Description
Used by the Bloombase Keyparc project to secure online digital assets using cryptography over web services
Date of IANA registration
2012-09-23
matrix
matrix
URI suffix
matrix
Description
Provides discovery for both client and server APIs to the Matrix federated protocol
mercure
mercure
URI suffix
mercure
Description
Discovery of Mercure hubs. Mercure is a protocol enabling the pushing of data updates to web browsers and other HTTP clients in a fast, reliable and battery-efficient way.
mta-sts.txt
mta-sts.txt
URI suffix
mta-sts.txt
Description
SMTP MTA Strict Transport Security Policy
Date of IANA registration
2018-06-21
ni
ni
URI suffix
ni
Description
Naming Things with Hashes
nodeinfo
nodeinfo
URI suffix
nodeinfo
Description
Metadata for federated social networking servers
nostr.json
nostr.json
URI suffix
nostr.json
Description
Discovery of Nostr public keys and related relays, according to NIP-05
Date of IANA registration
2024-03-18
oauth-authorization-server
oauth-authorization-server
URI suffix
oauth-authorization-server
Description
OAuth Authorization Server Metadata
Date of IANA registration
2018-03-27
openid-configuration
openid-configuration
URI suffix
openid-configuration
Description
OpenID Connect
Date of IANA registration
2013-08-27
openorg
openorg
URI suffix
openorg
Description
Organisation Profile Document
Date of IANA registration
2015-05-29
openpgpkey
openpgpkey
URI suffix
openpgpkey
Description
OpenPGP Web Key Service
org.flathub.VerifiedApps.txt
org.flathub.VerifiedApps.txt
URI suffix
org.flathub.VerifiedApps.txt
Description
Verifies that an app is associated with given domain in Flathub
passkey-endpoints
passkey-endpoints
URI suffix
passkey-endpoints
Description
Formally advertises support for passkeys and provides direct links for enrollment and management for password managers to automatically create/upgrade.
pki-validation
pki-validation
URI suffix
pki-validation
Description
CA/Browser Forum’s Baseline Requirements Certificate Policy for the Issuance and Management of Publicly-Trusted Certificates
Date of IANA registration
2017-02-06
posh
posh
URI suffix
posh
Description
PKIX over Secure HTTP (POSH)
Date of IANA registration
2015-09-20
privacy-sandbox-attestations.json
privacy-sandbox-attestations.json
URI suffix
privacy-sandbox-attestations.json
Description
The Google Chrome Privacy Sandbox attestation file
pubvendors.json
pubvendors.json
URI suffix
pubvendors.json
Description
The IAB pubvendors.json tech spec, which provide a standard for publishers to publicly declare the vendors that they work with, and their respective data rights/configuration
Date of IANA registration
2020-09-07
reload-config
reload-config
URI suffix
reload-config
Description
REsource LOcation And Discovery (RELOAD) Base Protocol
repute-template
repute-template
URI suffix
repute-template
Description
A Reputation Query Protocol
Date of IANA registration
2013-09-30
resourcesync
resourcesync
URI suffix
resourcesync
Description
ResourceSync Framework Specification
Date of IANA registration
2017-05-26
security.txt
security.txt
URI suffix
security.txt
Description
Standard to help organizations define the process for security researchers to disclose security vulnerabilities
Date of IANA registration
2018-08-20
statements.txt
statements.txt
URI suffix
statements.txt
Description
Standard for collective contract signing
stun-key
stun-key
URI suffix
stun-key
Description
Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization
Date of IANA registration
2015-06-12
tdmrep.json
tdmrep.json
URI suffix
tdmrep.json
Description
Domain-wide TDM (Text and Data Mining) reservation
time
time
URI suffix
time
Description
Time over HTTPS specification
Date of IANA registration
2015-12-09
timezone
timezone
URI suffix
timezone
Description
Time Zone Data Distribution Service
Date of IANA registration
2015-08-03
traffic-advice
traffic-advice
URI suffix
traffic-advice
Description
Prefetch control (proposal; implemented in Chrome Privacy Preserving Prefetch Proxy crawler)
uma2-configuration
uma2-configuration
URI suffix
uma2-configuration
Description
User-Managed Access (UMA) 2.0 grant for OAuth 2.0 authorization
Date of IANA registration
2017-06-20
vercel/flags
vercel/flags
URI suffix
vercel/flags
Description
Overridable Feature Flag's for Vercel's Toolbar
void
void
URI suffix
void
Description
Describing Linked Datasets with the VoID Vocabulary
Date of IANA registration
2011-05-11
wasm-pkg/registry.json
wasm-pkg/registry.json
URI suffix
wasm-pkg/registry.json
Description
WebAssembly registry
webauthn
webauthn
URI suffix
webauthn
Description
WebAuthn Related Origins
webfinger
webfinger
URI suffix
webfinger
Description
WebFinger
Date of IANA registration
2013-03-15, 2013-09-06
workflow
workflow
URI suffix
workflow
Description
Workflow Development Kit Routes
xrp-ledger.toml
xrp-ledger.toml
URI suffix
xrp-ledger.toml
Description
XRP ledger node & account information
URI suffix
Description
Reference
Date of IANA registration
acme-challenge
Automated Certificate Management Environment (ACME)
2019-03-01
agent-card.json
Details for an A2A Server's Agent Card
ai-plugin.json
Manifest for a ChatGPT plugin
apple-app-site-association
An Apple service that enables secure data exchange between iOS and a website
apple-developer-merchantid-domain-association
Apple Pay
appspecific
Used by some application to get some informations about the application (e.g chrome devtools: appspecific/com.chrome.devtools.json)
ashrae
BACnet – A data communication protocol for building automation and control networks
2016-01-22
assetlinks.json
AssetLinks protocol used to identify one or more digital assets (such as web sites or mobile apps) that are related to the hosting web site in some fashion
2015-09-28
atproto-did
Handle-to-DID resolution for AT Protocol
autoconfig/mail
Mozilla Thunderbird mail autoconfiguration service
browserid
Mozilla Persona
caldav
Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV)
carddav
Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV)
change-password
Helps password managers find the URL for changing client account passwords
coap
CoAP (Constrained Application Protocol) over TCP, TLS, and WebSockets
2017-12-22
com.apple.remotemanagement
Apple-Account–based user enrollment for mobile device management
com.chrome.devtools.json
Automatic Workspace Folders - Chromium DevTools Ecosystem Guide for Web_development_tools
core
Constrained RESTful Environments (CoRE) Link Format
csvm
CSV metadata, Model for Tabular Data and Metadata on the Web
2015-09-28
dat
Links domain to Dat identifier, used by Beaker web browser
did.json
did:web Decentralized Identifiers (DIDs) for the Web
discord
Domain verification for Discord account connection
dnt
Site-wide tracking status resource
2015-08-19
dnt-policy.txt
A privacy-friendly Do Not Track (DNT) Policy
2015-08-19
est
Enrollment over Secure Transport (EST)
2013-08-16
genid
Resource Description Framework (RDF) Skolem IRIs
2012-11-15
gpc.json
Global Privacy Control (GPC)
hoba
HTTP Origin-Bound Authentication (HOBA)
2015-01-20
host-meta
Web Host Metadata
host-meta.json
Web Host Metadata
http-opportunistic
Opportunistic Security for HTTP/2
2017-03-20
keybase.txt
Used by the Keybase project to identify a proof that one or more people whose public keys may be retrieved using the Keybase service have administrative control over the origin server from which it is retrieved
2014-04-08
keyparc
Used by the Bloombase Keyparc project to secure online digital assets using cryptography over web services
2012-09-23
matrix
Provides discovery for both client and server APIs to the Matrix federated protocol
mercure
Discovery of Mercure hubs. Mercure is a protocol enabling the pushing of data updates to web browsers and other HTTP clients in a fast, reliable and battery-efficient way.
mta-sts.txt
SMTP MTA Strict Transport Security Policy
2018-06-21
ni
Naming Things with Hashes
nodeinfo
for federated social networking servers
nostr.json
Discovery of Nostr public keys and related relays, according to NIP-05
2024-03-18
oauth-authorization-server
OAuth Authorization Server Metadata
2018-03-27
openid-configuration
OpenID Connect
2013-08-27
openorg
Organisation Profile Document
2015-05-29
openpgpkey
OpenPGP Web Key Service
org.flathub.VerifiedApps.txt
Verifies that an app is associated with given domain in Flathub
passkey-endpoints
Formally advertises support for passkeys and provides direct links for enrollment and management for password managers to automatically create/upgrade.
pki-validation
CA/Browser Forum’s Baseline Requirements Certificate Policy for the Issuance and Management of Publicly-Trusted Certificates
2017-02-06
posh
PKIX over Secure HTTP (POSH)
2015-09-20
privacy-sandbox-attestations.json
The Google Chrome Privacy Sandbox attestation file
pubvendors.json
The IAB pubvendors.json tech spec, which provide a standard for publishers to publicly declare the vendors that they work with, and their respective data rights/configuration
2020-09-07

References

  1. Well-Known Uniform Resource Identifiers (URIs)
    https://www.rfc-editor.org/rfc/rfc8615
  2. Automatic Certificate Management Environment (ACME)
    https://www.rfc-editor.org/rfc/rfc8555
  3. a2a-protocol.org
    https://a2a-protocol.org/latest/topics/agent-discovery/#discovery-strategies
  4. platform.openai.com
    https://platform.openai.com/docs/plugins/getting-started
  5. developer.apple.com
    https://developer.apple.com/library/ios/documentation/General/Conceptual/AppSearch/UniversalLinks.html
  6. developer.apple.com
    https://developer.apple.com/reference/applepayjs/
  7. "Automatic Workspace Folders"
    https://chromium.googlesource.com/devtools/devtools-frontend/+/main/docs/ecosystem/automatic_workspace_folders.md
  8. "Proposed Addendum am to Standard 135-2012, BACnet – A Data Communication Protocol for Building Automation and Control Networks"
    https://web.archive.org/web/20180508115302/http://www.bacnet.org/Addenda/Add-135-2012am-ppr3-draft-17_chair_approved.pdf
  9. Google Developers
    https://developers.google.com/digital-asset-links/v1/getting-started
  10. atproto.com
    https://atproto.com/specs/handle#https-well-known-method
  11. "Thunderbird:Autoconfiguration – MozillaWiki"
    https://wiki.mozilla.org/Thunderbird:Autoconfiguration
  12. Locating Services for Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV)
    https://www.rfc-editor.org/rfc/rfc6764
  13. w3c.github.io
    https://w3c.github.io/webappsec-change-password-url/
  14. CoAP (Constrained Application Protocol) over TCP, TLS, and WebSockets
    https://www.rfc-editor.org/rfc/rfc8323
  15. support.apple.com
    https://support.apple.com/guide/deployment/user-enrollment-and-mdm-dep23db2037d/1/web/1.0#dep798f25ab7
  16. developer.apple.com
    https://developer.apple.com/documentation/devicemanagement/discover_authentication_servers
  17. Constrained RESTful Environments (CoRE) Link Format
    https://www.rfc-editor.org/rfc/rfc6690
  18. www.w3.org
    https://www.w3.org/TR/tabular-data-model/Overview.html
  19. beakerbrowser.com
    https://web.archive.org/web/20200114212600/https://beakerbrowser.com/docs/guides/use-a-domain-name-with-dat#well-knowndat
  20. www.datprotocol.com
    https://www.datprotocol.com/deps/0005-dns/#-well-known-dat
  21. Mastodon
    https://mastodon.social/@advaith/110727524300667599
  22. www.w3.org
    https://www.w3.org/TR/tracking-dnt/#status-resource
  23. Electronic Frontier Foundation
    https://www.eff.org/dnt-policy
  24. Enrollment over Secure Transport
    https://www.rfc-editor.org/rfc/rfc7030
  25. www.w3.org
    http://www.w3.org/TR/rdf11-concepts/Overview.html
  26. Global Privacy Control (GPC) – Proposal 22 March 2024
    https://privacycg.github.io/gpc-spec/
  27. HTTP Origin-Bound Authentication (HOBA)
    https://datatracker.ietf.org/doc/html/rfc7486#section-6
  28. Web Host Metadata
    https://www.rfc-editor.org/rfc/rfc6415
  29. Opportunistic Security for HTTP/2
    https://datatracker.ietf.org/doc/html/rfc8164#section-2.3
  30. keybase.io
    https://keybase.io/__/keybase_well_known
  31. "Resource Identifier (RI) Scheme name: keyparc"
    https://www.iana.org/assignments/uri-schemes/prov/keyparc
  32. "Client-Server API"
    https://matrix.org/docs/spec/client_server/latest#well-known-uri
  33. mercure.rocks
    https://mercure.rocks/spec#discovery
  34. SMTP MTA Strict Transport Security (MTA-STS)
    https://datatracker.ietf.org/doc/html/rfc8461#section-3.2
  35. Naming Things with Hashes
    https://www.rfc-editor.org/rfc/rfc6920
  36. "NodeInfo"
    https://github.com/jhass/nodeinfo
  37. github.com
    https://github.com/nostr-protocol/nips/blob/master/05.md
  38. OAuth 2.0 Authorization Server Metadata
    https://www.rfc-editor.org/rfc/rfc8414
  39. openid.net
    https://openid.net/specs/openid-connect-discovery-1_0.html
  40. opd.data.ac.uk
    http://opd.data.ac.uk/
  41. OpenPGP Web Key Directory
    https://datatracker.ietf.org/doc/html/draft-koch-openpgp-webkey-service-07
  42. docs.flathub.org
    https://docs.flathub.org/docs/for-app-authors/verification
  43. w3c.github.io
    https://w3c.github.io/webappsec-passkey-endpoints/passkey-endpoints.html
  44. "Baseline Requirements Certificate Policy for the Issuance and Management of Publicly-Trusted Certificates"
    https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.3.8.pdf
  45. PKIX over Secure HTTP (POSH)
    https://www.rfc-editor.org/rfc/rfc7711
  46. Google for Developers
    https://developers.google.com/privacy-sandbox/private-advertising/enrollment#upload_your_attestation_file
  47. "web"
    https://documentation.sourcepoint.com/cmp/consent-management-platform-cmp-overview/gdpr/iab-framework/create-pubvendors-json-file-with-sourcepoint-api
  48. REsource LOcation And Discovery (RELOAD) Base Protocol
    https://www.rfc-editor.org/rfc/rfc6940
  49. A Reputation Query Protocol
    https://www.rfc-editor.org/rfc/rfc7072
  50. "ANSI/NISO Z39.99-2017"
    http://www.openarchives.org/rs/resourcesync
  51. security.txt
    https://securitytxt.org/
  52. stated.network
    https://stated.network/docs/stated_well_known.html
  53. Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization
    https://www.rfc-editor.org/rfc/rfc7635
  54. "TDM Reservation Protocol (TDMRep) ; Final Community Group Report"
    https://www.w3.org/2022/tdmrep/
  55. phk.freebsd.dk
    http://phk.freebsd.dk/time/20151129
  56. Time Zone Data Distribution Service
    https://www.rfc-editor.org/rfc/rfc7808
  57. github.io
    https://buettner.github.io/private-prefetch-proxy/traffic-advice.html
  58. docs.kantarainitiative.org
    https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-grant-2.0.html#as-config
  59. vercel.com
    https://vercel.com/docs/workflow-collaboration/feature-flags/supporting-feature-flags
  60. www.w3.org
    http://www.w3.org/TR/void/Overview.html
  61. github.com
    https://github.com/bytecodealliance/registry/blob/ec28719bd9ef636628f36ec268d935b69c8face4/crates/api/src/lib.rs#L9
  62. "Web Authentication: An API for accessing Public Key Credentials - Level 3"
    https://www.w3.org/TR/webauthn-3/#sctn-related-origins
  63. WebFinger
    https://www.rfc-editor.org/rfc/rfc7033
  64. useworkflow.dev
    https://useworkflow.dev/docs/how-it-works/code-transform#comparison-table
  65. xrpl.org
    https://xrpl.org/xrp-ledger-toml.html
Image
Source:
Tip: Wheel or +/− to zoom, drag to pan, Esc to close.