Adapt uniqueAuthenticationToken to OSCORE/DTLS

secretsauceai / voice-assistant-protocol

A bus for voice assistants, including benchmarks.

BSD 3-Clause "New" or "Revised" License

5 stars 1 forks source link

Adapt uniqueAuthenticationToken to OSCORE/DTLS #6

Open sheosi opened 2 years ago

sheosi commented 2 years ago

Right now in the spec, there's a feature called uniqueAuthenticationToken, used to secure a connection and make sure they are who they say they are. This should be adapted to work with a better security standard like OSCORE or DTLS.

sheosi commented 2 years ago

After how to adapt it has been decided, other questions will remain like:

What happens if we change server (used to connect to one and now we are connecting to another)
Recovery mechanism (even if it means erasing the data related to the skill/client in the registry) in case local data has been lost or corrupted
Can we detect that the uniqueAuthenticationToken has been compromised, so that then we issue a new one?