CoAP Echo Challenges: Prove Request Freshness Before Allocating Expensive State
Use Echo as a narrowly defined admission check: require evidence of request freshness or claimed-address reachability before the server starts the expensive work that depends on that evidence. Keep authentication, authorization, request validation, and resource quotas as separate gates. A valid Echo value does not make an operation permitted. This guide follows RFC 9175 and…