Solved

MQTT, SSL, and Tunnel

Posted on 2014-10-22
2
830 Views
Last Modified: 2014-10-24
Can you tunnel MQTT inside HTTP(S) without it being TLS or SSL ?

Thanks
0
Comment
Question by:Anthony Lucia
2 Comments
 
LVL 62

Accepted Solution

by:
btan earned 500 total points
ID: 40399374
MQTT is a many-to-many communication protocol for passing messages between multiple clients through a central broker. It decouples producer and consumer by letting clients publish and having the broker decide where to route and copy messages. MQTT brokers may require username and password authentication from clients to connect. To ensure privacy, the TCP connection may be encrypted with SSL/TLS. In other words, it is still SSL/TLS for HTTPS connection.

Below is an instance of tunnelling MQTT through HTML5 websockets using node.js Streams.
https://github.com/mcollina/mows

So extending the WebSocket, I uderstand such connection starts its life with an HTTP or HTTPS handshake. When the page is accessed through HTTP, you can use WS or WSS (WebSocket secure: WS over TLS) . However, when your page is loaded through HTTPS, you can only use WSS - browsers don't allow to "downgrade" security.
http://en.wikipedia.org/wiki/WebSocket#Proxy_traversal

I believe https will still need tls - in fact https is mostly tls/ssl
0
 

Author Closing Comment

by:Anthony Lucia
ID: 40402243
Excellent Answer.  Thanks
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As technology users and professionals, we’re always learning. Our universal interest in advancing our knowledge of the trade is unmatched by most industries. It’s a curiosity that makes sense, given the climate of change. Within that, there lies a…
Google Drive is extremely cheap offsite storage, and it's even possible to get extra storage for free for two years.  You can use the free account 15GB, and if you have an Android device..when you install Google Drive for the first time it will give…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question