WG Security 2024-09-10

[emiltin]

Participants

Toni, Emil

TLS on Embedded systems

https://bcs365.com/insights/8-best-practices-for-securing-iot-devices/#:~:text=One%20of%20the%20primary%20steps,MFA)%20can%20significantly%20enhance%20security.
https://www.microchip.com/en-us/about/media-center/blog/2022/tls-and-secure-elements
https://securityscorecard.com/blog/best-practices-for-securing-internet-of-things/
https://www.linkedin.com/pulse/strategies-ensuring-end-to-end-security-embedded-devices/

We looked at a few articles on Security on Embedded/IoT systems. There's a lot to digest, and we do need security experts to help us.

Communication via TLS creates a secure channel, but does not provide end-to-end encryption, which requires to sender and receiver encrypt/decrypt the payload part of each messages transmitted.

For RSMP 4 MQTT can use use TLS, based on either a TPC or a QUIC transport layer.

Next steps

Steps from previous meeting are still revelant:
https://github.com/orgs/rsmp-nordic/discussions/83