Password authentication for gateway
-
I could not find any option for password authentication or any type of authentication on mysensors gateway on port 5003, anyone on the LAN could access or sent data to the gateway.... any help would be appreciated...
-
Isn't possible at the moment.
Why would you let anyone on your LAN anyway?
The main problem is that the Arduino isn't capable of any type of encryption, like SSL for the traffic over the LAN. So even having a password wouldn't help much. I would just snoop it an control your stuff anyway.
-
@Admin @hek could you please take a look at this http://forum.arduino.cc/index.php?topic=101104.0, even though the sketch consumes a lot of program space, an arduino mega is sufficient for the task!!
-
@noelgeorgi said:
This solution adds zero security. Password is transported unencrypted over the network.
-
@hek thanks for the reply, I will use node-red to convert mqtt messages to json for Domoticz, it does have authentication
-
@hek said:
@noelgeorgi said:
This solution adds zero security. Password is transported unencrypted over the network.
It provide negative security. Such a piss poor solution actually makes existing security weaker. And potentially compromises the entire system.
