Subject: [core] FW: New Version Notification for draft-mattsson-core-coap-attacks-01.txt

From: John Mattsson <[email-masked]>
Date: Tue, 27 Jul 2021 12:21:57 +0000

Hi,

I tried to address all received comments on title, abstract, introduction, and amplification attacks.

Comments on Section 2 will be addressed in a future version:
https://github.com/EricssonResearch/coap-actuators/issues.

Section 3 on amplification attacks has been substantially expanded.

Cheers,
John

From: [email-masked] <[email-masked]>
Date: Tuesday, 27 July 2021 at 14:14
To: Christian Amsüss <[email-masked]>, Göran Selander <[email-masked]>, John Mattsson <[email-masked]>, Christian Amsuess <[email-masked]>, Francesca Palombini <[email-masked]>, Göran Selander <[email-masked]>, John Fornehed <[email-masked]>, John Mattsson <[email-masked]>
Subject: New Version Notification for draft-mattsson-core-coap-attacks-01.txt

A new version of I-D, draft-mattsson-core-coap-attacks-01.txt
has been successfully submitted by John Preuß Mattsson and posted to the
IETF repository.

Name:           draft-mattsson-core-coap-attacks
Revision:       01
Title:          CoAP Attacks
Document date:  2021-07-27
Group:          Individual Submission
Pages:          25
URL:            https://www.ietf.org/archive/id/draft-mattsson-core-coap-attacks-01.txt
Status:         https://datatracker.ietf.org/doc/draft-mattsson-core-coap-attacks/
Htmlized:       https://datatracker.ietf.org/doc/html/draft-mattsson-core-coap-attacks
Diff:           https://www.ietf.org/rfcdiff?url2=draft-mattsson-core-coap-attacks-01

Abstract:
   Being able to securely read information from sensors, to securely
   control actuators, and to not enable distributed denial-of-service
   attacks are essential in a world of connected and networking things
   interacting with the physical world.  This document summarizes a
   number of known attacks on CoAP and show that just using CoAP with a
   security protocol like DTLS, TLS, or OSCORE is not enough for secure
   operation.  The document also summarizes different denial-of-service
   attacks using CoAP.  The goal with this document is motivating
   generic and protocol-specific recommendations on the usage of CoAP.
   Several of the discussed attacks can be mitigated with the solutions
   in draft-ietf-core-echo-request-tag.

The IETF Secretariat