Security modified by h-hermsen

h-hermsen — Mon, 20 Sep 2021 19:14:20 -0000

--- v1
+++ v2
@@ -1,12 +1,12 @@
 [[startpage]]
-[[section align=right]]
-
-@hermsen
-@i-campbell
-
+[[section bgcolor=darkgrey color=white align=right]]
 [[img src=https://forge.codesys.com/svn/prj,cfunit,code/trunk/www/logo_codesys_forge.png height=96p align=left]][[img src=https://forge.codesys.com/prj/mqttsparkplugb/screenshot/co5e%20sparkplug%20bolt%20logo%20round%20blue.png height=96p align=left]]

-[[section bgcolor=white color=black align=center]]
+[[members]]
+Sparkplug™ and the Sparkplug™ logo are trademarks of the Eclipse Foundation
+Copyright © 10/11/19 Eclipse Foundation, Inc. https://www.eclipse.org/legal/efsl.php
+
+[[section bgcolor=darkgrey color=white align=center]]
 # SparkplugB Security Definitions
 **This Page**
 [Authentication](#Authentication) | [Authorization](#Authorization) | [Encryption](#Encryption)

Security modified by h-hermsen

h-hermsen — Wed, 11 Aug 2021 19:58:38 -0000

@hermsen
@i-campbell

SparkplugB Security Definitions

This Page
Authentication | Authorization | Encryption

General Sparkplug info
Infrastructure | Security | Messages

Information and guides
Sparkplug™ information | Preview how-to | Setup a test system with Ignition Primary Host | Add SparkplugB to an existing CODESYS project

Authentication

There are several levels of security and access control configured within an MQTT infrastructure.
From a pure MQTT client perspective, the client does need to provide

a mandatory unique Client ID,

optional Username and Password

Authorization

Although access control is not mandated in the MQTT specification for use in MQTT Server implementations, Access Control List (ACL) functionality is available for most MQTT Server implementations. The ACL of an MQTT Server implementation is used to specify which Topic Namespace any MQTT Client can subscribe to and publish on. For further information on this topic see your MQTT broker's documentation.

Encryption

The MQTT specification does not specify any TCP/IP security scheme as it was envisaged that TCP/IP security would (and did) change over time. In short, SparkplugB lifts upon MQTT, which lifts upon TCP/IP and it's ever evolving security, so SparkplugB is by design equipped with the latest security features. Allthough Sparkplug B will not specify any TCP/IP security schema it will provide examples on how to secure an MQTT infrastructure using TLS security.

Recent changes to Security

Security modified by h-hermsen

Security modified by h-hermsen

SparkplugB Security Definitions

Authentication

Authorization

Encryption