Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Doubly encrypted transmission between Web Historian and PDK #2

Open
lbogaardt opened this issue Jul 1, 2019 · 0 comments
Open

Doubly encrypted transmission between Web Historian and PDK #2

lbogaardt opened this issue Jul 1, 2019 · 0 comments

Comments

@lbogaardt
Copy link
Contributor

The Passive Data Kit URL entries contain the encrypted_transmission field. This is a new feature to set up public/private key pairs between PDK clients (the Web Historian) and PDK servers to encrypt the data so that only the PDK server can decrypt the transmissions from its clients. This accomplishes the same basic function as certificate pinning and also provides a data protection mechanism when HTTPS might be unavailable for some reason. When this is turned on, the encrypted payloads are generally also sent via HTTPS, so the data is doubly protected, even from MITM approaches.

Currently, this is not enabled for our version of Web Historian. Perhaps this would be a good idea in the future.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant