Sitelet https://github.com/httpslocal/usecases/commit/44a5d8afa88349ff159145e57eaabe8fbba37348
Skip to content

Commit 44a5d8a

Browse files
committed
HTTPS/WSS -> HTTPS
1 parent c02afd3 commit 44a5d8a

1 file changed

Lines changed: 11 additions & 11 deletions

File tree

‎index.bs‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ specifies the `https://` scheme only, the document will indicate so.
4444
A user agent (<dfn>UA</dfn>) is a web browser on a user’s PC, smartphone, tablet
4545
and so on, which is connected to a local network.
4646

47-
A <dfn>device</dfn> is in the same local network as the [=UA=], capable of HTTPS/WSS server.
47+
A <dfn>device</dfn> is in the same local network as the [=UA=], capable of HTTPS server.
4848

4949
A <dfn>web service</dfn> is a service hosted on the internet and whose frontend is
5050
loaded on the [=UA=], which accesses to the [=device=] with HTTPS or WSS on the local network.
@@ -192,15 +192,15 @@ is used for the communication, e.g. file transfer.
192192
Requirements {#requirements}
193193
============================
194194

195-
This section outlines functional and non-functional requirements of HTTPS/WSS
195+
This section outlines functional and non-functional requirements of HTTPS
196196
usage in local network represented in [[#usecases]].
197197

198198
Functional requirements consist of guarantee of device trustworthiness,
199199
device identification, alerting user and user consent, device discovery,
200200
and certificate management.
201201

202202
Non-functional requirements address security, privacy, availability, scalability,
203-
and user experience aspects of HTTPS/WSS usage in local network.
203+
and user experience aspects of HTTPS usage in local network.
204204

205205
## Functional Requirements ## {#req-functional}
206206

@@ -261,13 +261,13 @@ Therefore, considering the [=UA=] shall meet the following requirement:
261261
- When the frontend of the [=web service=] requests the [=UA=] to access the [=device=] in local network,
262262
the [=UA=] shall show a popup window to obtain the user’s consent and shall permit
263263
the access only if the user approve the access.
264-
- When the [=device=] does not use a [=Web PKI certificate=] for HTTPS/WSS communication,
264+
- When the [=device=] does not use a [=Web PKI certificate=] for HTTPS communication,
265265
the [=UA=] shall have a way to obtain user’s consent to trust an alternative identifier
266266
(e.g., [=non-Web PKI certificate=], PSK, RPK).
267267

268268
### Certificate Management ### {#req-certificate-management}
269269

270-
When the [=device=] obtains a TLS server certificate for HTTPS/WSS communication,
270+
When the [=device=] obtains a TLS server certificate for HTTPS communication,
271271
the [=CA=], [=UA=] and the [=device=] shall meet the following requirements:
272272
- The [=CA=] that issues certificates for [=device=]s shall be able to revoke the certificates.
273273
- The [=UA=] shall be able to detect the revocation of the [=device=]’s certificate.
@@ -294,11 +294,11 @@ The non-functional requirements are listed below:
294294
### Security ### {#req-security}
295295

296296
It is essential to take care of the following security considerations:
297-
- If the [=device=] uses a TLS server certificate for HTTPS/WSS communication,
297+
- If the [=device=] uses a TLS server certificate for HTTPS communication,
298298
the certificate issuance and renewal steps shall prevent passive network
299299
eavesdroppers from learning information related to the identification or certificate
300300
exchanged among the system components (the CA, the [=device=], the [=UA=] and the [=web service=]).
301-
- If the [=device=] uses a TLS server certificate for HTTPS/WSS communication,
301+
- If the [=device=] uses a TLS server certificate for HTTPS communication,
302302
the certificate issuance and renewal steps shall prevent active network attackers
303303
from impersonating a [=device=] and observing or altering data intended for the [=CA=] or for the [=UA=].
304304
- If the [=device=] does not use a TLS server certificate, alternate steps for the [=UA=]
@@ -326,7 +326,7 @@ the [=UA=] and the [=device=] shall meet the following requirements:
326326
- To avoid user tracking by means of using the [=device=], the evice identifier
327327
(e.g., a TLS server certificate for the [=device=]) should not be static and preinstalled.
328328
The [=device=] should be capable of obtaining the TLS server certificate dynamically
329-
for HTTPS/WSS communication during commissioning.
329+
for HTTPS communication during commissioning.
330330

331331
### Availability ### {#req-availability}
332332

@@ -341,11 +341,11 @@ Therefore, the [=device=] and the local network system shall meet the following
341341

342342
### Scalability ### {#req-scalability}
343343

344-
If all IoT devices started using [=Web PKI certificate=]s for HTTPS/WSS communication,
344+
If all IoT devices started using [=Web PKI certificate=]s for HTTPS communication,
345345
the number of certificates required will be significantly larger than the total number
346346
of certificates exists today for public web servers.
347347
Therefore, following exemption may be required:
348-
- If the [=device=] uses a [=Web PKI certificate=] for HTTPS/WSS communication,
348+
- If the [=device=] uses a [=Web PKI certificate=] for HTTPS communication,
349349
the [=CA=] should be exempt to preserve CT (certificate transparency) logs for the [=device=]s.
350350

351351
### User Experience ### {#req-user-experience}
@@ -354,7 +354,7 @@ While the user interaction is required in certain scenarios, it should not be
354354
a hindrance to providing a better user experience. Following requirements should be considered:
355355
- The [=UA=] should minimize user’s interaction for [=device identification=]
356356
as much as possible.
357-
- If the [=device=] uses a TLS server certificate for HTTPS/WSS communication,
357+
- If the [=device=] uses a TLS server certificate for HTTPS communication,
358358
the procedure of certificate grant and issuance and renewal should be automated
359359
as much as possible so that the users' interaction can be greatly minimized.
360360

0 commit comments

Comments
 (0)