Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 27
Abstract: This document specifies enhancements to the Constrained Application Protocol (CoAP) that mitigate security issues in particular use cases. The Echo option enables a CoAP server to verify the freshness of a request or to force a client to demonstrate reachability at its claimed network address. The Request-Tag option allows the CoAP server to match block-wise message fragments belonging to the same request. This document updates RFC 7252 with respect to the following: processing requirements for client Tokens, forbidding non-secure reuse of Tokens to ensure response-to-request binding when CoAP is used with a security protocol, and amplification mitigation (where the use of the Echo option is now recommended).
Publication Date: 2022-02-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9175
Link: https://doi.org/10.17487/RFC9175
Author(s): Christian Amsüss
John Preuß Mattsson
Göran Selander
Keyword(s): OSCORE, Block-Wise Transfer, DTLS, Latency, DoS, Amplification

Latest version of IETF RFC 9175

Document Versions — IETF RFC 9175

▶ IETF RFC 9175 (2022-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 7252 [Active*]
IETF RFC 7959 [Active*]
IETF RFC 8174 [Active*]
RFC8470 — RFC8470 EXTERNAL
IETF RFC 8613 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-core-groupcomm-bis-05 — I-D.ietf-core-groupcomm-bis EXTERNAL
IETF.draft-ietf-core-oscore-groupcomm-13 — I-D.ietf-core-oscore-groupcomm EXTERNAL
IETF.draft-irtf-pearg-numeric-ids-generation-08 — I-D.irtf-pearg-numeric-ids-generation EXTERNAL
IETF.draft-mattsson-core-coap-attacks-01 — I-D.mattsson-core-coap-attacks EXTERNAL
Fielding, R., "Architectural Styles and the Design of Network-based Software Architectures", 2000, <https://www.ics.uci.edu/~fielding/pubs/dissertation/fielding_dissertation.pdf>. EXTERNAL
IETF RFC 7641 [Active*]
IETF RFC 8323 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 8974 [Active*]
IETF RFC 9000 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9175.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9175, Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing. Available at https://doi.org/10.17487/RFC9175

Snippet:

IETF RFC 9175, Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing. Available at https://doi.org/10.17487/RFC9175

HTML (ISO 690 compliant)

Preview:

IETF RFC 9175, Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing. Available at https://doi.org/10.17487/RFC9175

Snippet:

<span class="citation"><cite>IETF RFC 9175</cite>, Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing. Available at <a href="https://doi.org/10.17487/RFC9175" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9175</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9175, Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing
doi: 10.17487/RFC9175
url: https://doi.org/10.17487/RFC9175

Snippet:

<li>
<cite id="bib-rfc9175">IETF RFC 9175</cite>, Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing
<span class="doi">10.17487/RFC9175</span>
</li>

Referenced By

IETF RFC 9853 [Active*]