@@ -44,7 +44,7 @@ specifies the `https://` scheme only, the document will indicate so.
4444A user agent (<dfn>UA</dfn> ) is a web browser on a user’s PC, smartphone, tablet
4545and so on, which is connected to a local network.
4646
47- A <dfn>device</dfn> is in the same local network as the [=UA=] , capable of HTTPS/WSS server.
47+ A <dfn>device</dfn> is in the same local network as the [=UA=] , capable of HTTPS server.
4848
4949A <dfn>web service</dfn> is a service hosted on the internet and whose frontend is
5050loaded on the [=UA=] , which accesses to the [=device=] with HTTPS or WSS on the local network.
@@ -192,15 +192,15 @@ is used for the communication, e.g. file transfer.
192192Requirements {#requirements}
193193============================
194194
195- This section outlines functional and non-functional requirements of HTTPS/WSS
195+ This section outlines functional and non-functional requirements of HTTPS
196196usage in local network represented in [[#usecases]] .
197197
198198Functional requirements consist of guarantee of device trustworthiness,
199199device identification, alerting user and user consent, device discovery,
200200and certificate management.
201201
202202Non-functional requirements address security, privacy, availability, scalability,
203- and user experience aspects of HTTPS/WSS usage in local network.
203+ and user experience aspects of HTTPS usage in local network.
204204
205205## Functional Requirements ## {#req-functional}
206206
@@ -261,13 +261,13 @@ Therefore, considering the [=UA=] shall meet the following requirement:
261261- When the frontend of the [=web service=] requests the [=UA=] to access the [=device=] in local network,
262262 the [=UA=] shall show a popup window to obtain the user’s consent and shall permit
263263 the access only if the user approve the access.
264- - When the [=device=] does not use a [=Web PKI certificate=] for HTTPS/WSS communication,
264+ - When the [=device=] does not use a [=Web PKI certificate=] for HTTPS communication,
265265 the [=UA=] shall have a way to obtain user’s consent to trust an alternative identifier
266266 (e.g., [=non-Web PKI certificate=] , PSK, RPK).
267267
268268### Certificate Management ### {#req-certificate-management}
269269
270- When the [=device=] obtains a TLS server certificate for HTTPS/WSS communication,
270+ When the [=device=] obtains a TLS server certificate for HTTPS communication,
271271the [=CA=] , [=UA=] and the [=device=] shall meet the following requirements:
272272- The [=CA=] that issues certificates for [=device=] s shall be able to revoke the certificates.
273273- The [=UA=] shall be able to detect the revocation of the [=device=] ’s certificate.
@@ -294,11 +294,11 @@ The non-functional requirements are listed below:
294294### Security ### {#req-security}
295295
296296It is essential to take care of the following security considerations:
297- - If the [=device=] uses a TLS server certificate for HTTPS/WSS communication,
297+ - If the [=device=] uses a TLS server certificate for HTTPS communication,
298298 the certificate issuance and renewal steps shall prevent passive network
299299 eavesdroppers from learning information related to the identification or certificate
300300 exchanged among the system components (the CA, the [=device=] , the [=UA=] and the [=web service=] ).
301- - If the [=device=] uses a TLS server certificate for HTTPS/WSS communication,
301+ - If the [=device=] uses a TLS server certificate for HTTPS communication,
302302 the certificate issuance and renewal steps shall prevent active network attackers
303303 from impersonating a [=device=] and observing or altering data intended for the [=CA=] or for the [=UA=] .
304304- If the [=device=] does not use a TLS server certificate, alternate steps for the [=UA=]
@@ -326,7 +326,7 @@ the [=UA=] and the [=device=] shall meet the following requirements:
326326- To avoid user tracking by means of using the [=device=] , the evice identifier
327327 (e.g., a TLS server certificate for the [=device=] ) should not be static and preinstalled.
328328 The [=device=] should be capable of obtaining the TLS server certificate dynamically
329- for HTTPS/WSS communication during commissioning.
329+ for HTTPS communication during commissioning.
330330
331331### Availability ### {#req-availability}
332332
@@ -341,11 +341,11 @@ Therefore, the [=device=] and the local network system shall meet the following
341341
342342### Scalability ### {#req-scalability}
343343
344- If all IoT devices started using [=Web PKI certificate=] s for HTTPS/WSS communication,
344+ If all IoT devices started using [=Web PKI certificate=] s for HTTPS communication,
345345the number of certificates required will be significantly larger than the total number
346346of certificates exists today for public web servers.
347347Therefore, following exemption may be required:
348- - If the [=device=] uses a [=Web PKI certificate=] for HTTPS/WSS communication,
348+ - If the [=device=] uses a [=Web PKI certificate=] for HTTPS communication,
349349 the [=CA=] should be exempt to preserve CT (certificate transparency) logs for the [=device=] s.
350350
351351### User Experience ### {#req-user-experience}
@@ -354,7 +354,7 @@ While the user interaction is required in certain scenarios, it should not be
354354a hindrance to providing a better user experience. Following requirements should be considered:
355355- The [=UA=] should minimize user’s interaction for [=device identification=]
356356 as much as possible.
357- - If the [=device=] uses a TLS server certificate for HTTPS/WSS communication,
357+ - If the [=device=] uses a TLS server certificate for HTTPS communication,
358358 the procedure of certificate grant and issuance and renewal should be automated
359359 as much as possible so that the users' interaction can be greatly minimized.
360360
0 commit comments