Yes - technically you don't need to escape : in most places, but many implementations will do so anyway as they use a single encoding method for all URI compone

Yes - technically you don't need to escape : in most places, but many implementations will do so anyway as they use a single encoding method for all URI components. (And if you don't encode these things where they are not required then you'll soon find lots of downstream systems that break).