Hot answers tagged

10 votes

Performance of MQTT over TLS vs. MQTT

I wouldn't expect the difference to be too significant, once the connection is set up. A breakdown of the overhead that TLS produces in general can be found here. The important bits are: The ...
Aurora0001's user avatar
  • 18.5k
9 votes

Can One-way SSL secure an IoT device?

SSL/TLS works well when the "server" is at known location (a fixed hostname) that can match the CN of the certificate it presents. This doesn't work well for device on home networks (e.g. most IoT ...
hardillb's user avatar
  • 12.5k
8 votes

Performance of MQTT over TLS vs. MQTT

Not really, your pretty much going to have to test and benchmark your specific situation. The following are likely to have a direct impact on performance. What client/broker hardware are you using, ...
hardillb's user avatar
  • 12.5k
7 votes

How can I prevent my device leaking sensitive data through traffic fingerprinting?

If the service you use can tolerate some latency, routing the traffic of your device through the TOR network would make the destination address impossible to determine for your ISP, and the source ...
Sylvain's user avatar
  • 563
5 votes

How can I prevent my device leaking sensitive data through traffic fingerprinting?

For devices which are particularly sensitive, a good way to prevent someone from snooping the connection pattern is to generate spoof data, or intentionally skew the connection times (if data need not ...
Sean Houlihane's user avatar
4 votes
Accepted

How would I use HTTPS on the web-based device config running an access point and no internet access?

One possible option is to use HTTPS and ship a real certificate on the device: Since you control the access point you presumably control the DHCP server on the access point, so you can have it ...
hardillb's user avatar
  • 12.5k
4 votes
Accepted

How can I prevent my device leaking sensitive data through traffic fingerprinting?

What are the steps to the privacy leak described? Basically there are three parts in getting the information described in the paper. An interested party recording the outgoing traffic (2) Said party ...
Helmar's user avatar
  • 8,430
4 votes

How can I prevent my device leaking sensitive data through traffic fingerprinting?

While I like the use of TOR, you might not be able to configure every device to use it. The simplest way would be to do something at the router, where all traffic, from all devices, enters and exits ...
Mawg says reinstate Monica's user avatar
4 votes

Performance of MQTT over TLS vs. MQTT

Making useful performance estimates is hard. It's likely that your application will require encryption for at least some of it's traffic, so there is unlikely to be any implementation cost to make ...
Sean Houlihane's user avatar
3 votes
Accepted

Can traffic spy see username and password of MQTT client

Yes, without TLS the CONNECT packet is sent in the clear so all of it's content can be seen. A full breakdown of how to decode the CONNECT packet can be found here
hardillb's user avatar
  • 12.5k
3 votes

MQTT client connect to broker have self signed certification

The point of a certificate is that one endpoint can be sure that the other endpoint is who they say they are, and not somebody else. In the most common case, it is the client which checks that the ...
jcaron's user avatar
  • 2,238
2 votes

MQTT client connect to broker have self signed certification

I think you may be mistaking self-signed certificates with free (automatic) certificates signed by a Certificate Authority. If you want to have a secure connection between a server (MQTT broker) and a ...
Jantek Mikulski's user avatar
2 votes

MQTT client connect to broker have self signed certification

I assume this is linked to this SO question. You need to look at what you are trying to achieve here. A broker can user a self signed certificate to identify it's self as long as the clients all have ...
hardillb's user avatar
  • 12.5k
1 vote
Accepted

TLS Certificate life for IoT System

When a TLS connection is established, the server will present a certificate, and possibly intermediate certificates. Your device should then decide if it trusts the presented certificate. It does so ...
jcaron's user avatar
  • 2,238
1 vote
Accepted

Mqtt in production

HiveMQ might be one of possible production ready MQTT brokers. And they also have a community edition but may have some limitations.
H. Sinan Alioglu's user avatar
1 vote

Creating a secure MQTT session with TLS while employing smartphone gateway

You would never run a TLS session tunnelled over MQTT. TLS connections expect a single bi-directional pipe over which to communicate, while it is possible to build this over MQTT, it is better suited ...
hardillb's user avatar
  • 12.5k
1 vote

AWS IoT certificate rejection

I managed to resolve the connection issues by removing the comments for the CA in the library I linked and uploading the Amazon root certificate to the board as a .der file as I showed in here
Thibaut Hardin's user avatar
1 vote

Can One-way SSL secure an IoT device?

Generally, TLS is good for much more than x.509, but many implementations limit it to only x.509. x.509 is a technique for a secure indirect trust. "A" trusts "B", if "B" has a certificate, which is ...
Achim Kraus's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible