[ https://issues.oasis-open.org/browse/MQTT-588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=81918#comment-81918 ]
Simon Johnson commented on MQTT-588:
------------------------------------
Hi Anja, thank you for this document. I think a lot of these topics make sense; ÂI believe we should be explicit in calling out DTLS 1.2 & 1.3 as the advised alternative to TLS transport encryption mechanisms when deploying with UDP. I really like the "security profile" idea.ÂI think this really resonates with final deployment strategies.
I think it may also be nice to include a "Common Attack Vectors" section. I will add a slide I did to the repository which listed some bits and ensure we cross check and have all points covered.
I think the next step will be to add DTLS and get it into the document where we can iterate.Â
> Review proposal for the MQTT-SN Security and Safety chapter
> -----------------------------------------------------------
>
> Key: MQTT-588
> URL: https://issues.oasis-open.org/browse/MQTT-588
> Project: OASIS Message Queuing Telemetry Transport (MQTT) TC
> Issue Type: Task
> Components: MQTT-SN
> Affects Versions: v2.0
> Reporter: Anja Helmbrecht-Schaar
> Assignee: Ian Craggs
> Priority: Major
> Attachments: MQTT-SN-Chapter-Safety-Proposal.docx
>
>
> Created a draft for the Chapter *5 Safety, Security, and Data Protection Considerations.*
> Pls review and comment / contribute until it can be merged if/when everyone is happy.
--
This message was sent by Atlassian Jira
(v8.3.3#803004)
