4 ms·
All those would have limitations due to inter-vendor incompatibility. I think we need someone to develop a home IOT security standard protocol for how to handl
by mrep 8y ago
All those would have limitations due to inter-vendor incompatibility. I think we need someone to develop a home IOT security standard protocol for how to handle this.
- harshreality 8y agoThe app is specifically aware of the IOT device's API in order to use it at all. Why wouldn't it be aware of the IOT device's method for presence + intention verification? I left out another option for adding additional authorizations (beyond the initial setup), which should work for "important" IOT devices, like google home or amazon echo, that are already associated with an account someone is using and monitoring: - Send a confirmation prompt to the primary Google/Amazon account holder: "Do the "do you authorize <device>/<app> to access the API on your Google/Amazon X device?" Standardization would be great, but implementing one or two more API calls to deal with first-use verification of a remote app doesn't seem like a big deal when the app is going to be doing lots of other stuff with that specific device's API.