|
This slide describes the MQTT security issues.
However, the MQTT protocol is not equipped with sufficient security mechanisms by default—it does not adopt any encryption mechanisms to protect the data being transmitted.
Instead, the MQTT protocols strongly recommend the use of secure socket layer/transport layer security (SSL/TLS) for encryption.
The SSL/TLS protocols provide a secure communication channel between pairs of hosts.
Although the use of SSL/TLS is recommended, most MQTT-based IoT systems do not use the SSL/TLS.
This is because that the SSL/TLS protocols entail a significant amount of additional communication and
computational overhead that cannot be supported by resource constrained IoT devices.
|