Hi, I read the discussion and it really hard to decide...
If we open the MQTT port by default, should we open the HTTP service in the future? Thanks, -- Jialin Qiao School of Software, Tsinghua University 乔嘉林 清华大学 软件学院 > -----原始邮件----- > 发件人: "伍 雄" <[email protected]> > 发送时间: 2020-04-13 14:15:26 (星期一) > 收件人: "[email protected]" <[email protected]> > 抄送: > 主题: 回复: About the security issues that mqtt-server is turned on by default > > > I think mqtt-server shouled be shutdown by default. > As I think It's hard to guarantee that there are no security issues in the > future. Usually user installed iotDB, > most of user defalut configuration, if mqtt-server have security issues in > the future,it will be affecting many devices if turned on by default. We > should use the minimum principle to open the port. > ________________________________ > 发件人: Dawei Liu <[email protected]> > 发送时间: 2020年4月13日 3:26 > 收件人: [email protected] <[email protected]> > 主题: About the security issues that mqtt-server is turned on by default > > > > Hi, > > > Xiangdong and I had an interesting discussion on github[1]. > > > We reached an agreement that mqtt-server would be turned on by default for > the user. > > > But I think the security details still need to be discussed. > > > Can anyone provide some advice on security? > > > > > > > [1] https://github.com/apache/incubator-iotdb/pull/1033 > > > > > > > Thanks > --- > Dawei Liu > >
