New answers tagged

1

As with any IP server you can control which interfaces/addresses the server binds to (listens on). So if you only want clients on the same host as the broker to be able to connect then you just have the broker bind to 127.0.0.1 rather than to 0.0.0.0 (this is a shortcut to bind to all local interfaces)


5

As with nearly any unencrypted protocol, there is no man in the middle protection. If this is a treat model you need to protect against then running MQTT over SSL/TLS is the solution.


4

Nothing, as I stated in the answer on Stack Overflow they are byte for byte exactly the same protocol, it's just the transport layer which changes from raw TCP to Websockets. The difference is that you CAN NOT open raw sockets from within the browser, the security sandbox will not allow you to open arbitrary TCP connections to random hosts. The sandbox will ...


2

First, if you just have 1 garage door opener, why are you generating a random client id every time? using a fixed clientID would be the right thing to do here. The only time a random clientID makes any sense is when you are using a transient client e.g. a webpage using MQTT over Websockets. Second, you appear to be double looping your reconnect function. ...


1

I had to attach the policy to the certificate and set the port to 8883 because the protocol is MQTT and not MQTT over Websockets.


Top 50 recent answers are included