A security framework for MQTT
SeongHan Shin, Kazukuni Kobara, Chia‐Chuan Chuang, Weicheng Huang · 2016
In this paper, we propose a simple security framework for MQTT (for short, AugMQTT) by incorporating the AugPAKE protocol [16]. As a distinguishing feature, AugMQTT does not require any certificate validation checks and certificate revocation checks on both publishers/subscribers and broker sides. Also, we discuss several aspects of AugMQTT followed by performance overhead of the AugPAKE protocol. Finally, we explain implementation details of AugMQTT that makes use of MQTT open source project Mosquitto 1.4.9 [8] in order to incorporate the AugPAKE protocol.