Skip to content

Postel's Law (Robustness Principle)

Postel's protocol-design maxim — be conservative in what you send, liberal in what you accept — which keeps a multi-vendor system interoperable by having every implementation produce tightly to spec while its acceptance window absorbs the realistic scatter of others.

Core Idea

Postel's Law is Jon Postel's 1980–81 protocol-design heuristic: "Be conservative in what you do, be liberal in what you accept from others." It operates on a structural asymmetry — the spec defines a strictly-valid region, real implementations scatter wider, and each receiver sets its own acceptance boundary. If every implementation produces tightly and accepts liberally, the union of acceptance windows covers everything in circulation, keeping a heterogeneous system interoperable without universal strict conformance.

Scope of Application

The named prescription lives within network and protocol engineering and adjacent input-handling contexts over a shared standard.

  • Internet protocol design — the native substrate; shaped the TCP/IP, HTTP, DNS, and SMTP stacks.
  • HTML / browser parsing — the canonical drift case, where liberal acceptance forced HTML5 to codify browser bugs.
  • API and version-compatibility design — the accept-unknown-fields versus reject-for-validation choice.
  • Protocol security analysis — the parser-differential attack-surface reading (Sassaman/Patterson/Bratus).
  • Input handling — how strictly a parser or interface constrains and absorbs off-spec scatter.

Clarity

Naming a design as Postel-style decomposes a vague "be tolerant" intuition into two independently-set knobs — production tolerance and acceptance tolerance — that the principle says should point in opposite directions, making "which side of the wire are we relaxing?" crisp. Its sharper payoff is making the cost side legible at design time: liberal acceptance's known consequences attach as foreseeable, turning "should I be robust?" into whether the bootstrap premise still holds.

Manages Complexity

A combinatorial pairwise interoperability problem collapses once seen through two knobs per node: if all produce conservatively and accept liberally, the union of acceptance windows covers everything, so interoperability holds without any pairwise matching. The four knob combinations become four nameable regimes read straight off the settings, and one further premise fixes the determinate drift trajectory of the chosen regime over time.

Abstract Reasoning

The law licenses a boundary-drawing regime-placement move (four nameable regimes read off the two knobs), a predictive coverage-condition move (population-level union in place of a compatibility graph), a drift-trajectory forecast of liberal acceptance's determinate downstream costs, a diagnostic premise-test converting "should I be robust?" into whether the bootstrap problem still holds, and a parser-differential security inference reading divergent acceptance windows as attack surface.

Knowledge Transfer

Within protocol engineering the law transfers as a working design lever across all multi-implementor shared protocols, because each presents the same asymmetry; the QUIC/HTTP-3 strict stance is itself a within-domain transfer of the premise test with the opposite conclusion. Beyond it the prescription is largely analogy ("speak precisely, listen charitably"), while the underlying asymmetric production/acceptance tolerance genuinely recurs in biology and linguistics as co-instances — carried by a candidate asymmetric_tolerance pattern (with fault_tolerance, interoperability, principle-of-charity cousins), not by the named heuristic.

Relationships to Other Abstractions

Local relationship map for Postel's Law (Robustness Principle)Parents appear above the current abstraction, mutual partners to the right, and children below. Node labels state whether each abstraction is prime or domain-specific; colors identify relation types.Postel's Law (Robust…DOMAINPrime abstraction: Asymmetric Interface Tolerance — is a kind ofAsymmetric Inte…PRIME

Current abstraction Postel's Law (Robustness Principle) Domain-specific

Parents (1) — more general patterns this builds on

  • Postel's Law (Robustness Principle) is a kind of Asymmetric Interface Tolerance Prime

    Postel's Law is the strict-send/liberal-receive protocol specialization of the broader asymmetric-interface-tolerance design space.

Hierarchy paths (2) — routes to 2 parentless roots

Neighborhood in Abstraction Space

Postel's Law (Robustness Principle) sits in a moderately populated region (52nd percentile for distinctiveness): it has near-neighbors but no dense thicket of look-alikes.

Family — Unclustered & Miscellaneous (309 abstractions)

Nearest neighbors

Computed from structural-signature embeddings · 2026-07-12