Do we need to protect against Agent instance ID reuse / impersonation?

open-telemetry / opamp-spec

OpAMP Specification

Apache License 2.0

108 stars 34 forks source link

Do we need to protect against Agent instance ID reuse / impersonation? #20

Open tigrannajaryan opened 2 years ago

tigrannajaryan commented 2 years ago

How does the server know that the request/report received actually is generated by the agent that the message claims? Do we need to verify that the message is not fake (impersonated) or the server trusts the senders that are authenticated?