3 ms·
Please tell me how to painlessly install a CA on a user their computer? Imagine buying a network connected coffeepot. You plug it in and you're done.
by tokenizerrr 9y ago
Please tell me how to painlessly install a CA on a user their computer? Imagine buying a network connected coffeepot. You plug it in and you're done.
- foolfoolz 9y agoall you need is a certificate on the device and an app in the app store. or an installer they can download to their computer. you don’t need a full on traditional CA. you just need to verify (one) certificates. sign the certificate in the manufacturing plant and put it in the coffee maker l. give the CA cert out in the app or the installer. now you can verify if the coffee maker talking to you over HTTPS is legit and probably get it’s serial number off the cert too. your CA keys never see the public. you could go even more secure and use that as a bootstrap to a per customer CA and generate a new cert on install, but this is a coffee maker right?
- tokenizerrr 9y agoWhat app store? Which OS? Do you now suddenly have to write software for all OSes to install the certificate? Something that you didn't even have to think about doing before. The entire reason you went for a webui to begin with.
- foolfoolz 9y agothis is only in the pure local no internet case. with internet it’s a no-install plug in and done you don’t need to install any certificates in any case. the server just needs to validate the client is well signed
- tokenizerrr 9y agoUser's webbrowser is visiting the appliance which resides on LAN. Webbrowsers require certificates signed by a CA.
- foolfoolz 9y agoi think you are misunderstanding the IoT flow. you don’t connect to devices
- tokenizerrr 9y agoThat is a generalization. You certainly do with many networked appliances. And I prefer this, since that means connectivity with the device is not dependent on some cloud service. And that some cloud service can't control my appliance.