Re: [m2m-iwg] AXEDA Comments on MQTT contribution to ECLIPSE PAHO & OASI

[Matteo Collina <matteo.collina@xxxxxxxxx>]

2013/1/28 andypiperuk@xxxxxxxxx <andypiperuk@xxxxxxxxx>

That is a very good point, Roger.

I strongly suspect it comes from heritage MQSeries (and mainframe) days, but ICBW. AndySC, Dave, Ian, Nick et al might be able to fill in more detail.

Probably does not make sense to mandate a particular length, especially one that short.

The current MQTT spec does not recommend anything on how to implement SSL+MQTT, because dealing with plain text password is not secure at all.

Moreover MQTT might be extended to use a "challenge" scheme, something like HTTP digest auth.

Cheers,

Matteo