[Dots] TLS APLN extension

["Jon Shallow" <[e-mail]>]

Hi there,

 

As per RFC 8323: 8.2.  coaps+tcp URI Scheme

 

...

 

   o  If a TLS server does not support the Application-Layer Protocol

      Negotiation (ALPN) extension [RFC7301] or wishes to accommodate

      TLS clients that do not support ALPN, it MAY offer a coaps+tcp

      endpoint on TCP port 5684.  This endpoint MAY also be ALPN

      enabled.  A TLS server MAY offer coaps+tcp endpoints on ports

      other than TCP port 5684, which MUST be ALPN enabled.

 

   o  For TCP ports other than port 5684, the TLS client MUST use the

      ALPN extension to advertise the "coap" protocol identifier (see

      Section 11.7) in the list of protocols in its ClientHello.  If the

      TCP server selects and returns the "coap" protocol identifier

      using the ALPN extension in its ServerHello, then the connection

      succeeds.  If the TLS server either does not negotiate the ALPN

      extension or returns a no_application_protocol alert, the TLS

      client MUST close the connection.

 

Do we need to refer to the requirement for ALPN as we are not hosting on
port 5684?

 

Regards

 

Jon