RFC9175 · Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing

{
  "id": "RFC9175",
  "number": 9175,
  "title_en": "Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document specifies enhancements to the Constrained Application Protocol (CoAP) that mitigate security issues in particular use cases. The Echo option enables a CoAP server to verify the freshness of a request or to force a client to demonstrate reachability at its claimed network address. The Request-Tag option allows the CoAP server to match block-wise message fragments belonging to the same request. This document updates RFC 7252 with respect to the following: processing requirements for client Tokens, forbidding non-secure reuse of Tokens to ensure response-to-request binding when CoAP is used with a security protocol, and amplification mitigation (where the use of the Echo option is now recommended).",
  "authors": [
    "C. Amsüss",
    "J. Preuß Mattsson",
    "G. Selander"
  ],
  "organizations": [],
  "publication_date": "2022-02-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "wit",
  "area_ru": "Веб и транспорт Интернета",
  "working_group": "core",
  "source_draft": "draft-ietf-core-echo-request-tag-14",
  "page_count": 27,
  "doi": "10.17487/RFC9175",
  "keywords": [
    "OSCORE",
    "block-wise",
    "DTLS",
    "freshness",
    "delay",
    "denial-of-service",
    "amplification",
    "Message Body Integrity",
    "Concurrent Block-Wise",
    "Request-Response Binding",
    "Token Reuse"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC7252"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9175/",
    "html": "https://www.rfc-editor.org/rfc/rfc9175.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9175.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9175/"
  }
}