Questions tagged [tls]

For questions related to how Transport Layer Security (TLS) can provide privacy and data integrity between IoT applications or devices. Also, practical usages of TLS in current IoT applications can be discussed. Tag should not be used to discuss general TLS topics that apply to computing in general.

Filter by
Sorted by
Tagged with
1 vote
1 answer
38 views

TLS Certificate life for IoT System

I'm developing an IoT product's software, where it runs HTTPS client. Given that the certificate of servers are renewed every year, it's not that issue while we're authenticating against the ...
Hamza Hajeir's user avatar
0 votes
1 answer
151 views

Mqtt in production

I am using Mqtt to build a project. I am wanting to move my whole work to prod ready. My hardware is ESP-07 and custom PCB design the broker is mosquitto the app (Nodejs,react native) I implemented ...
offgrid8's user avatar
2 votes
3 answers
1k views

MQTT client connect to broker have self signed certification

I run c# MQTT broker (in socket not websocket) with self signed certification for TLS in cloud server and now client cant connect to server and get this error message The remote certificate was ...
behroozbc's user avatar
  • 153
0 votes
1 answer
53 views

Can traffic spy see username and password of MQTT client

Can Traffic spy see the username and password of client send to broker when broker don't use TLS ?
behroozbc's user avatar
  • 153
1 vote
0 answers
3k views

esp-idf - mqtt ssl example certificate error

I'm having some trouble with mqtt ssl example on esp-idf ESP32. Example: mqtt_ssl If I test it with the default broker "mqtts://mqtt.eclipse.org:8883" and default certificate "mqtt_eclipse_org.pem" ...
DDBE's user avatar
  • 133
3 votes
1 answer
102 views

Creating a secure MQTT session with TLS while employing smartphone gateway

My IoT device creates a BLE connection with a smartphone from which it connects to cloud. When integrating a TLS, should it be above MQTT or below? All implementation I have reviewed so far does it ...
RealTimeEngineer91's user avatar
4 votes
1 answer
2k views

AWS IoT certificate rejection

I've been trying to configure AWS IoT to communicate over MQTT using TLS for days on a D1 Mini board and have been running into a road block with authentication. I've used several AWS IoT Arduino ...
Thibaut Hardin's user avatar
9 votes
2 answers
926 views

Can One-way SSL secure an IoT device?

I am considering an IoT device connected to my local network (default settings, no VPN, no NAT, no DMZ) with or without Internet access. My device will run as a HTTP server offering a RPC mechanism ...
valentin's user avatar
  • 186
4 votes
0 answers
429 views

MQTT with TLS for TI CC3200 fails with 'Bad CA file' error

This topic seems to pop up everywhere but, without a conclusion as to how to get MQTT-TLS for CC3200 running. So, here goes one more. Goal Connect TI CC3200 board to AWS IoT broker via TLS. Steps ...
cogitoergosum's user avatar
7 votes
1 answer
2k views

How would I use HTTPS on the web-based device config running an access point and no internet access?

I'm building a Raspberry Pi-based device for backyard gardeners that has a web page and access point for the initial configuration, including the Wi-Fi configuration. The connection uses WPA2 and the ...
Slow Bro's user avatar
8 votes
4 answers
1k views

How can I prevent my device leaking sensitive data through traffic fingerprinting?

According to the recent paper A Smart Home is No Castle: Privacy Vulnerabilities of Encrypted IoT Traffic, many smart home devices can be 'fingerprinted' by their connection patterns. Since most ...
Aurora0001's user avatar
  • 18.2k
12 votes
3 answers
3k views

Performance of MQTT over TLS vs. MQTT

While MQTT is quite versatile it is also not secured on itself. This is by design. According to Stanford-Clark, security was consciously left out of the protocol initially because he and Nipper ...
Helmar's user avatar
  • 8,310