Omit login via MQTT?
jpmens opened this issue · comments
Jan-Piet Mens commented
I think we discussed this shortly. Should we consider forgoing the need for login
when talking to a device over MQTT? While that would mean that every client connected to the broker could send commands, I don't think it really matters; clients today can see the login
credentials if they're subscribed, so that probably makes it worse...
If we do go this route, login
as command should silently be ignored when coming over MQTT. Commands over SMS need this authentication.
Christoph Krey commented
Implemented