Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

crypted communication to server #3

Open
Krufto opened this issue Nov 4, 2019 · 1 comment
Open

crypted communication to server #3

Krufto opened this issue Nov 4, 2019 · 1 comment
Labels
enhancement New feature or request

Comments

@Krufto
Copy link

Krufto commented Nov 4, 2019

to prevent a "man in the middle attack" the communication between server and client should be encoded.

@IVI053 IVI053 added the enhancement New feature or request label Nov 5, 2019
@IVI053
Copy link
Member

IVI053 commented Nov 5, 2019

The message payload utilizes HMAC. This prevents replay attacks. Interception of communication to gain information about cards and PINs is a possible thread but limited as network between server and client is a physically separated network.
But it should still be a easy improvement to activate MQTTS in mosquitto using TLS.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants