search

MicrochipTech / cryptoauth_trustplatform_designsuite

The Trust Platform for CryptoAuthentication™ is a combination of multiple elements to simplify the addition of security to any embedded design. This platform includes Hardware protyping tools along with a unique design suite to accelerate the prototyping of the most common use cases.
Other
14 stars 12 forks source link

Add jobs and streams, fix spoofing issue in deprecated policy. Fix AWS IoT brand name. #10

Closed rashedtalukder closed 2 years ago

rashedtalukder commented 2 years ago

This PR 1) Adds jobs and streams to the default policy for device registered with AWS IoT. This is required for enabling OTAs: https://docs.aws.amazon.com/freertos/latest/userguide/ota-mqtt-freertos.html#ota-mqtt-freertos-config 2) Fixes a potential spoofing issue due to an insecure policy. This policy allows a client to use ANY client ID. As a result, a device can publish messages impersonating other devices, and it can eavesdrop messages for other devices. See https://docs.aws.amazon.com/iot/latest/developerguide/security-best-practices.html#secure-mqtt 3) Fixes a typo where the AWS IoT name was misspelled.

adithyayuri commented 2 years ago

Let me test these changes and approve it.

rashedtalukder commented 2 years ago

Let me test these changes and approve it.

Is there an ETA for testing to be complete and this getting merged?