[OASIS Issue Tracker] (MQTT-588) Review proposal for the MQTT-SN Security and Safety chapter

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ https://issues.oasis-open.org/browse/MQTT-588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=81918#comment-81918 ] 

Simon Johnson commented on MQTT-588:
------------------------------------

Hi Anja, thank you for this document. I think a lot of these topics make sense; ÂI believe we should be explicit in calling out DTLS 1.2 & 1.3 as the advised alternative to TLS transport encryption mechanisms when deploying with UDP. I really like the "security profile" idea.ÂI think this really resonates with final deployment strategies.

I think it may also be nice to include a "Common Attack Vectors" section. I will add a slide I did to the repository which listed some bits and ensure we cross check and have all points covered.

I think the next step will be to add DTLS and get it into the document where we can iterate.Â

> Review proposal for the MQTT-SN Security and Safety chapter
> -----------------------------------------------------------
>
>                 Key: MQTT-588
>                 URL: https://issues.oasis-open.org/browse/MQTT-588
>             Project: OASIS Message Queuing Telemetry Transport (MQTT) TC
>          Issue Type: Task
>          Components: MQTT-SN
>    Affects Versions: v2.0
>            Reporter: Anja Helmbrecht-Schaar
>            Assignee: Ian Craggs
>            Priority: Major
>         Attachments: MQTT-SN-Chapter-Safety-Proposal.docx
>
>
> Created a draft for the Chapter *5 Safety, Security, and Data Protection Considerations.*
> Pls review and comment / contribute until it can be merged if/when everyone is happy.



--
This message was sent by Atlassian Jira
(v8.3.3#803004)