Re: [IOT] OpenADR comment period

Hello Thom Have you had any chance to look at XEP-0324: Provisioning? It provides a mechanism to control who/what talks to who/what, what users have what access rights to what services, etc. Sincerely, Peter Waher -----Original Message----- From: Thomas Nichols [mailto:tnichols@enernoc.com] Sent: den 19 juni 2013 22:52 To: XMPP in the Internet of Things Subject: Re: [IOT] OpenADR comment period One question, which is more of an implementation detail but we would like some input, is how to prevent communication between end node clients. I think during registration, VENs would have to be added to an ACL or group, and then a filter would be used at the XMPP server to block packets whose "to" and "from" belong to that group. Any general guidelines or best practices for securing a public XMPP server with possibly untrusted clients would be welcome. Thanks again! -Thom On 6/20/13 10:43 AM, "Peter Saint-Andre" <stpeter(a)stpeter.im> wrote: This email and any information disclosed in connection herewith, whether written or oral, is the property of EnerNOC, Inc. and is intended only for the person or entity to which it is addressed. This email may contain information that is privileged, confidential or otherwise protected from disclosure. Distributing or copying any information contained in this email to anyone other than the intended recipient is strictly prohibited. _______________________________________________ IOT mailing list IOT(a)xmpp.org http://mail.jabber.org/mailman/listinfo/iot ----- No virus found in this message. Checked by AVG - www.avg.com Version: 2013.0.3345 / Virus Database: 3199/6420 - Release Date: 06/18/13