From bc10c8d9cb64b2d97386ebcf456d3cd4d01198a6 Mon Sep 17 00:00:00 2001
From: Kunihiko Toumura
Date: Thu, 23 Jun 2022 11:49:38 +0900
Subject: [PATCH 1/2] fix warning from HTML Tidy
---
.../{WoT Profiles.png => WoTProfiles.png} | Bin
index.html | 20 +++++++++---------
2 files changed, 10 insertions(+), 10 deletions(-)
rename images/profiles/{WoT Profiles.png => WoTProfiles.png} (100%)
diff --git a/images/profiles/WoT Profiles.png b/images/profiles/WoTProfiles.png
similarity index 100%
rename from images/profiles/WoT Profiles.png
rename to images/profiles/WoTProfiles.png
diff --git a/index.html b/index.html
index a26332fb..889b64f1 100644
--- a/index.html
+++ b/index.html
@@ -1805,7 +1805,7 @@
Links
Linked Things
- Things MUST be hosted on networked system components
+ Things MUST be hosted on networked system components
with a software stack to realize interaction through a
network-facing interface, the WoT Interface of a Thing.
One example of this is an HTTP server running on an embedded device with sensors and actuators interfacing the
@@ -2843,7 +2843,7 @@
WoT Thing Description
-
+
Thing Model
The Thing Model offers the opportunity to define a template-based model for
@@ -2968,7 +2968,7 @@
Profiling Methodology
of a baseline profile.
@@ -4336,7 +4336,7 @@
Secure Transport
Public Networks:
When a Thing is made
+ id="arch-security-consideration-tls-mandatory-pub">When a Thing is made
available on the public internet so it can
be accessed by anyone, from anywhere, then it MUST be protected by secure
transport such as TLS or DTLS.
@@ -4350,7 +4350,7 @@
Secure Transport
Private Networks:
When a Thing is made
+ id="arch-security-consideration-tls-mandatory-priv">When a Thing is made
available on a private network then it SHOULD be protected by secure
transport such as TLS or DTLS.
@@ -4412,7 +4412,7 @@
Privacy Considerations
see the WoT Security and Privacy Guidelines
specification [[?WOT-SECURITY]].
-
+
sections of the WoT Thing Description
specification for additional details and discussion of
these points.
-
+
Thing Description Personally Identifiable
Information Risk
Thing descriptions can potentially contain
@@ -4504,7 +4504,7 @@
Thing Description Personally Identifiable
Access to Personally Identifiable Information
In addition to the risks of revealing Personally Identifiable Information (PII) through metadata
- discussed in ,
+ discussed in ,
the data returned by Things can itself be sensitive.
For example, a Thing could be monitoring the location or
health of a specific person. Information associated with a
@@ -4515,7 +4515,7 @@
Access to Personally Identifiable Information
Mitigation:
-
+
Things returning data or metadata (such as TDs) associated with a person MUST use some form of access control.
A special case of this is a Thing Description Directory,
@@ -4525,7 +4525,7 @@
Access to Personally Identifiable Information
required to use access control if the TDs describe Things associated with
identifiable people. In the case of services
returning Thing Descriptions, the following also applies:
-
+
Services returning Thing Descriptions with immutable IDs MUST use some form of access control.
Specifically, in both of these situations, the nosec security
From fb2a06c286c08b264c3f013027a9b59bfc77f369 Mon Sep 17 00:00:00 2001
From: Kunihiko Toumura <30313213+k-toumura@users.noreply.github.com>
Date: Fri, 24 Jun 2022 08:29:04 +0900
Subject: [PATCH 2/2] mandatory -> recommended
Co-authored-by: Michael McCool
---
index.html | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/index.html b/index.html
index 889b64f1..9dc53d50 100644
--- a/index.html
+++ b/index.html
@@ -4350,7 +4350,7 @@
Secure Transport
Private Networks:
When a Thing is made
+ id="arch-security-consideration-tls-recommended-priv">When a Thing is made
available on a private network then it SHOULD be protected by secure
transport such as TLS or DTLS.