Pub/Sub Security Considerations

[Gugym]

Create a threat model for the Pub/Sub including documenting any security around the protocols of MQTT and AMQP etc. This would provide a framework to assess security of the evolution of the EDR service to 1.2.

[chris-little]

@Gugym I am assuming that the threat model does not need to be part of the PubSub spec.

[Gugym]

@chris-little No, I would suggest it should be a supporting document for the benefit of a security assessment.

[chris-little]

@Gugym There is a series of weekly meetings of the OGC Security SWG planned to re-charter the Security SWG to produce a common security approach, like OGC API-Common Part 1: Core (the landing page), to address the exposure and query of security approaches.