> The fact of the matter is that manufacturers are too cheap to provide decent security. Out of curiosity, imagine I decided to do a Linux based IOT device tod

> The fact of the matter is that manufacturers are too cheap to provide decent security. Out of curiosity, imagine I decided to do a Linux based IOT device today. What liberally licensed reasonably mature security and updater framework would I use? I can find numerous competing communication frameworks, but nothing around doing updates or the higher level platform. It looks like this has to be re-invented by each IOT vendor, which is going to be a lot of work. Heck even just trying to do SSL on a LAN is very difficult - https://news.ycombinator.com/item?id=11956088 https://news.ycombinator.com/item?id=11956088