John Mattsson
2018-03-20 09:41:00 UTC
Hi,
Now when we have several solution drafts referring to draft-mattsson-core-coap-actuators I think it is important that the document is up to date and took some time to update it.
- Added a summary (conclusion) in the introduction on properties (data-to-data binding, data-to-space binding, data-to-time binding) that often are required in IoT settings.
- Added references to the solution drafts ietf-core-echo-request-tag and liu-core-coap-delay-attacks
- Updated some of the text to align with ietf-core-echo-request-tag and liu-core-coap-delay-attacks
- Many editorials
Cheers,
John
On 2018-03-20, 09:30, "internet-***@ietf.org" <internet-***@ietf.org> wrote:
A new version of I-D, draft-mattsson-core-coap-actuators-05.txt
has been successfully submitted by John Mattsson and posted to the
IETF repository.
Name: draft-mattsson-core-coap-actuators
Revision: 05
Title: Controlling Actuators with CoAP
Document date: 2018-03-19
Group: Individual Submission
Pages: 18
URL: https://www.ietf.org/internet-drafts/draft-mattsson-core-coap-actuators-05.txt
Status: https://datatracker.ietf.org/doc/draft-mattsson-core-coap-actuators/
Htmlized: https://tools.ietf.org/html/draft-mattsson-core-coap-actuators-05
Htmlized: https://datatracker.ietf.org/doc/html/draft-mattsson-core-coap-actuators
Diff: https://www.ietf.org/rfcdiff?url2=draft-mattsson-core-coap-actuators-05
Abstract:
Being able to trust information from sensors and to securely control
actuators are essential in a world of connected and networking things
interacting with the physical world. In this memo we show that just
using COAP with a security protocol like DTLS, TLS, or OSCORE is not
enough. We describe several serious attacks any on-path attacker can
do, and discusses tougher requirements and mechanisms to mitigate the
attacks. While this document is focused on actuators, some of the
attacks apply equally well to sensors.
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
The IETF Secretariat
Now when we have several solution drafts referring to draft-mattsson-core-coap-actuators I think it is important that the document is up to date and took some time to update it.
- Added a summary (conclusion) in the introduction on properties (data-to-data binding, data-to-space binding, data-to-time binding) that often are required in IoT settings.
- Added references to the solution drafts ietf-core-echo-request-tag and liu-core-coap-delay-attacks
- Updated some of the text to align with ietf-core-echo-request-tag and liu-core-coap-delay-attacks
- Many editorials
Cheers,
John
On 2018-03-20, 09:30, "internet-***@ietf.org" <internet-***@ietf.org> wrote:
A new version of I-D, draft-mattsson-core-coap-actuators-05.txt
has been successfully submitted by John Mattsson and posted to the
IETF repository.
Name: draft-mattsson-core-coap-actuators
Revision: 05
Title: Controlling Actuators with CoAP
Document date: 2018-03-19
Group: Individual Submission
Pages: 18
URL: https://www.ietf.org/internet-drafts/draft-mattsson-core-coap-actuators-05.txt
Status: https://datatracker.ietf.org/doc/draft-mattsson-core-coap-actuators/
Htmlized: https://tools.ietf.org/html/draft-mattsson-core-coap-actuators-05
Htmlized: https://datatracker.ietf.org/doc/html/draft-mattsson-core-coap-actuators
Diff: https://www.ietf.org/rfcdiff?url2=draft-mattsson-core-coap-actuators-05
Abstract:
Being able to trust information from sensors and to securely control
actuators are essential in a world of connected and networking things
interacting with the physical world. In this memo we show that just
using COAP with a security protocol like DTLS, TLS, or OSCORE is not
enough. We describe several serious attacks any on-path attacker can
do, and discusses tougher requirements and mechanisms to mitigate the
attacks. While this document is focused on actuators, some of the
attacks apply equally well to sensors.
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
The IETF Secretariat