Subject: [core] Selection of default HTTP-CoAP URI mapping

From: "Dijk, Esko" <[email-masked]>
Date: Wed, 9 Oct 2013 07:16:59 +0000

Dear all,

the authors of draft-ietf-core-http-mapping-01 would like to propose a default HTTP-to-CoAP URI mapping solution that combines elements of the two best candidate solutions #2 and #5
(explained in http://tools.ietf.org/html/draft-ietf-core-http-mapping-01#section-4.2.2 and http://tools.ietf.org/html/draft-ietf-core-http-mapping-01#section-4.2.5 respectively)

Below URI template uses the notation of RFC 6570. The proposed format is

     /.well-known/core/{coap-scheme}/{+authority-pct-encoded}/{+path}?{+query}

where 'coap-scheme' can be coap or coaps. So, two sub-resources of the already-reserved /.well-known/core are used.

Example:
HTTP request to the proxy:
http://proxy.example.com/.well-known/core/coap/server.coap.example.com:4567/foo/bar?a=3
becomes a CoAP request sent by the proxy:
                coap://server.coap.example.com:4567/foo/bar?a=3

This format should make it easy to 'see' the CoAP URI embedded in the HTTP URI (except that the :// part has become a /) and also allows coap access from https and vice versa coaps from http, which is needed in some use cases (refer to ticket #347 http://trac.tools.ietf.org/wg/core/trac/ticket/347 for these use cases).
Note: To mitigate certain security worries about accessing coaps URIs over an unprotected http connection, we plan to add a recommendation that a configurable proxy by default disallows translating of http requests to coaps requests.

If there are no objections, we'll update the I-D text to express this solution.

best regards,
Esko

________________________________
The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.