Re: [IOT] OpenADR comment period

An OpenADR network conceptually looks like a star network, with a single VTN (virtual top node/ coordinator) and many VENS (virtual end nodes.) The VEN needs to trust commands from a top node, and VENs can't communicate -- ever -- with other VENs as far as OpenADR is concerned. Agreed it's largely an implementation concern which is why it's not laid out in the spec, more of a guidance. We consider in most cases, the VTN and XMPP server will be controlled by the same entity. The VTN could be connected as an XMPP client (or multiple clients) or VTN endpoints could be exposed as service JIDs. I think we have two choices. (1) Tell VTN implementers/ deployments that they need to secure the XMPP server to prevent VEN to VEN communication. Or (2) we require VENs to maintain a whitelist of VTN JIDs, and drop or reject packets that are not from an approved JID. Or maybe both. Thanks! -Thom On 6/20/13 11:58 AM, "Peter Saint-Andre" <stpeter(a)stpeter.im> wrote: This email and any information disclosed in connection herewith, whether written or oral, is the property of EnerNOC, Inc. and is intended only for the person or entity to which it is addressed. This email may contain information that is privileged, confidential or otherwise protected from disclosure. Distributing or copying any information contained in this email to anyone other than the intended recipient is strictly prohibited.