Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve security of MQTT system through authentication #57

Closed
4 tasks
Arizbethrojas opened this issue Apr 24, 2023 · 0 comments
Closed
4 tasks

Improve security of MQTT system through authentication #57

Arizbethrojas opened this issue Apr 24, 2023 · 0 comments

Comments

@Arizbethrojas
Copy link

Arizbethrojas commented Apr 24, 2023

Is your request related to a problem? Please describe.
Currently, connections on the MQTT system are not authenticated, which introduces vulnerabilities as far as who can access the system and what they can do. To avoid this, we should establish authentication and authorization routines.

Describe the solution you'd like

  • use TLS with certificate credentials from certificate authority (CA) for all connections.
  • Inbound ports on MQTT system should be disabled at the the edge clients
  • Only TCP/IP ports (8883, 443) should be open on the MQTT server
  • Use username and password for MQTT clients at servers
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants