search

PiSupply / iot-lora-image

RPi SD Card Image for IoT LoRa Range
11 stars 6 forks source link

Possibility of SSL as default #13

Closed ryanteck closed 4 years ago

ryanteck commented 4 years ago

We'll target this for the September Release of seeing about having an SSL Certificate somekind enabled as default.

ryanteck commented 4 years ago

Investigations started:

Implementing this does pose a few challenges but we should be able to overcome some of them.

Essentially a majority of this would have to be done in a first boot script rather than in compiling the SD card image. Otherwise every device flashed with the same image would have the same keys potentially causing the ability for attacks.

Second: There is a chance the user will get confused as to why they're seeing a message saying the site is insecure. This could be the biggest issue. For reference many home routers don't have an SSL for this reason. It's a barrier.

Third: a user may have multiple gateways on a network and one feature to be added in is allowing the hostname to be changed. So this would require the ability to also re-gen the certificate every time this happens.

ryanteck commented 4 years ago

To-do: Setup a cert manually on one of my gateways, and then see how easy it is to overcome the warnings as this would be the biggest barrier.

ryanteck commented 4 years ago

I want to re-look into this as can see it being a good feature to do.

ryanteck commented 4 years ago

Yep we'll do this, it's only one small warning that pops up now.

ryanteck commented 4 years ago

This is all implemented in the docker container for the controller.