Standards Bodies
Where specs come from — the organizations that define, publish, and maintain the internet and web specifications. The difference between canonical (normative) and convenient reference matters.
Canonical vs Convenient
The actual spec text as published by the standards body. This is what the protocol actually says. Use for precise behavior, edge cases, and security analysis.
RFC Editor · WHATWG · W3C · OpenID · CA/B Forum
Tutorials, MDN docs, vendor guides. Easier to read, great for implementation. Not authoritative — may simplify, lag updates, or contain errors.
MDN · Cloudflare · Auth0 · OWASP · vendor docs
RFC Editor
RFC Editor49 specs indexed · 28 must-knowThe canonical publication point for finalized RFCs. If a protocol is standardized as an RFC, the RFC Editor text is the normative final reference. Published by the IETF, IRTF, IAB, and independent stream.
IETF
Internet Engineering Task Force1 spec indexed · 1 must-knowThe primary standards body for internet protocols. Produces RFCs through working groups. Use IETF Datatracker for active drafts, working group status, and revision history.
IANA
Internet Assigned Numbers Authority1 spec indexed · 1 must-knowAuthoritative registry for protocol parameters: ports, HTTP status codes, media types, DNS record types, and many other code points. Not a spec body — a registry body.
WHATWG
Web Hypertext Application Technology Working Group15 specs indexed · 7 must-knowMaintains the living standards for the web platform: HTML, DOM, Fetch, URL, Streams, and more. These are continuously updated living documents, not versioned snapshots.
W3C
World Wide Web Consortium44 specs indexed · 7 must-knowPublishes web platform specs including CSS, accessibility, security policies, Service Workers, Web App Manifest, and many browser APIs. Also maintains some versioned HTML/DOM specs.
OpenID
OpenID Foundation1 spec indexed · 1 must-knowCanonical home for OpenID Connect specifications: OIDC Core, Discovery, Session Management, Dynamic Registration, and related profiles. Separate from the OAuth IETF work.
CA/B Forum
CA/Browser Forum1 spec indexed · 1 must-knowSets operational policy for publicly trusted TLS and S/MIME certificates. The Baseline Requirements are normative for all publicly trusted CAs and major browsers.
ICANN
Internet Corporation for Assigned Names and NumbersGoverns the DNS root zone, domain name policy, registry/registrar accreditation, and RDAP deployment context. Operational policy, not protocol design.
Unicode
Unicode ConsortiumCanonical source for Unicode character semantics, IDNA compatibility processing (UTS #46), and internationalized identifier behavior. Essential when handling non-ASCII domains or user data.
Ecma
Ecma International1 spec indexed · 1 must-knowPublishes the ECMAScript (JavaScript) language specification and related standards. TC39 is the committee responsible for ECMAScript evolution.
FIDO
FIDO AllianceDevelops authentication standards for strong, phishing-resistant authentication: FIDO2, WebAuthn (co-published with W3C), and CTAP. Key for passkeys and modern MFA.
EIP / ERC
Ethereum Improvement Proposals8 specs indexed · 6 must-knowThe Ethereum community's open process for proposing changes to the protocol. EIPs cover core protocol changes; ERCs (Ethereum Request for Comments) cover application-layer standards like token interfaces.
BIP
Bitcoin Improvement Proposals3 specs indexed · 3 must-knowThe Bitcoin community's open process for proposing protocol changes, standards, and informational documents. BIPs cover everything from consensus rules to wallet derivation paths and payment URIs.
GraphQL
GraphQL Foundation1 spec indexedStewards the GraphQL specification, originally developed at Facebook/Meta. The GraphQL Foundation is a Linux Foundation project. The spec defines the query language, type system, and execution model.
gRPC
Google / gRPC2 specs indexedgRPC is an open-source RPC framework originally developed at Google. It uses Protocol Buffers (protobuf) as its IDL and wire format, and HTTP/2 as the transport. Now a CNCF graduated project.
AsyncAPI
AsyncAPI Initiative1 spec indexedMaintains the AsyncAPI specification — an OpenAPI-like description language for event-driven and message-based APIs. Covers WebSocket, MQTT, AMQP, Kafka, and more.
Khronos
Khronos Group1 spec indexed · 1 must-knowIndustry consortium that publishes open graphics, compute, and media standards. Maintains WebGL, OpenGL ES, Vulkan, and related GPU interface specifications used across browsers and native platforms.