From bc10c8d9cb64b2d97386ebcf456d3cd4d01198a6 Mon Sep 17 00:00:00 2001 From: Kunihiko Toumura Date: Thu, 23 Jun 2022 11:49:38 +0900 Subject: [PATCH 1/2] fix warning from HTML Tidy --- .../{WoT Profiles.png => WoTProfiles.png} | Bin index.html | 20 +++++++++--------- 2 files changed, 10 insertions(+), 10 deletions(-) rename images/profiles/{WoT Profiles.png => WoTProfiles.png} (100%) diff --git a/images/profiles/WoT Profiles.png b/images/profiles/WoTProfiles.png similarity index 100% rename from images/profiles/WoT Profiles.png rename to images/profiles/WoTProfiles.png diff --git a/index.html b/index.html index a26332fb..889b64f1 100644 --- a/index.html +++ b/index.html @@ -1805,7 +1805,7 @@

Links

Linked Things

- Things MUST be hosted on networked system components + Things MUST be hosted on networked system components with a software stack to realize interaction through a network-facing interface, the WoT Interface of a Thing. One example of this is an HTTP server running on an embedded device with sensors and actuators interfacing the @@ -2843,7 +2843,7 @@

WoT Thing Description

-
+

Thing Model

The Thing Model offers the opportunity to define a template-based model for @@ -2968,7 +2968,7 @@

Profiling Methodology

of a baseline profile.

- WoT Profiles + WoT Profiles
WoT Baseline Profile - Other Profiles

@@ -4336,7 +4336,7 @@

Secure Transport

Public Networks:
When a Thing is made + id="arch-security-consideration-tls-mandatory-pub">When a Thing is made available on the public internet so it can be accessed by anyone, from anywhere, then it MUST be protected by secure transport such as TLS or DTLS. @@ -4350,7 +4350,7 @@

Secure Transport

Private Networks:
When a Thing is made + id="arch-security-consideration-tls-mandatory-priv">When a Thing is made available on a private network then it SHOULD be protected by secure transport such as TLS or DTLS. @@ -4412,7 +4412,7 @@

Privacy Considerations

see the WoT Security and Privacy Guidelines specification [[?WOT-SECURITY]].

-
+

WoT Thing Description Risks

The metadata contained in a WoT Thing Description @@ -4430,7 +4430,7 @@

WoT Thing Description Risks

sections of the WoT Thing Description specification for additional details and discussion of these points.

-
+
Thing Description Personally Identifiable Information Risk

Thing descriptions can potentially contain @@ -4504,7 +4504,7 @@

Thing Description Personally Identifiable

Access to Personally Identifiable Information

In addition to the risks of revealing Personally Identifiable Information (PII) through metadata - discussed in , + discussed in , the data returned by Things can itself be sensitive. For example, a Thing could be monitoring the location or health of a specific person. Information associated with a @@ -4515,7 +4515,7 @@

Access to Personally Identifiable Information

Mitigation:
- + Things returning data or metadata (such as TDs) associated with a person MUST use some form of access control. A special case of this is a Thing Description Directory, @@ -4525,7 +4525,7 @@

Access to Personally Identifiable Information

required to use access control if the TDs describe Things associated with identifiable people. In the case of services returning Thing Descriptions, the following also applies: - + Services returning Thing Descriptions with immutable IDs MUST use some form of access control. Specifically, in both of these situations, the nosec security From fb2a06c286c08b264c3f013027a9b59bfc77f369 Mon Sep 17 00:00:00 2001 From: Kunihiko Toumura <30313213+k-toumura@users.noreply.github.com> Date: Fri, 24 Jun 2022 08:29:04 +0900 Subject: [PATCH 2/2] mandatory -> recommended Co-authored-by: Michael McCool --- index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.html b/index.html index 889b64f1..9dc53d50 100644 --- a/index.html +++ b/index.html @@ -4350,7 +4350,7 @@

Secure Transport

Private Networks:
When a Thing is made + id="arch-security-consideration-tls-recommended-priv">When a Thing is made available on a private network then it SHOULD be protected by secure transport such as TLS or DTLS.