Re: [dev] Security bug?

2018-01-15 Thread Heldt-Sheller, Nathan
Hi Gregg, If the local filesystem is not secure (e.g. Android) then yes, it’s a Device/Implementation-specific task to encrypt the Security Virtual Resources when storing. This is clearly and loudly spelled out in the “Best Security Practices” document that Vendors have to read (and initial th

Re: [dev] Question about discoverable resources

2018-01-15 Thread Eduardo Henrique Alves Maia M Oliveira
Hi guys, Excuse my dumbness but I'm not really getting it. How do you define in the ACL which resources are DISCOVERABLE? Because even if oic/res/ ask the client to authenticate, if I gave access to /oic/res/, the client will be able to discover any resource by only knowing it's type. Sure, the cl

Re: [dev] aircon_controlee example: SSL handshake error

2018-01-15 Thread Mats Wichmann
On 01/15/2018 09:28 AM, Martin Roesch wrote: > Hi, > > I ran into a problem with the airon_controlee example when using DTLS with > IoTivity 1.3.1. > The sign up to the cloud server fails with error_code OC_STACK_ERROR (255). > Since this error is not handled in the callback handleLoginoutCB, th

[dev] aircon_controlee example: SSL handshake error

2018-01-15 Thread Martin Roesch
Hi, I ran into a problem with the airon_controlee example when using DTLS with IoTivity 1.3.1. The sign up to the cloud server fails with error_code OC_STACK_ERROR (255). Since this error is not handled in the callback handleLoginoutCB, the following sign in throws an exception because the uid

Re: [dev] seeking volunteers to help improve IoTivity documentation

2018-01-15 Thread Arthur Barros Lapprand
Hi David, Is there a way we can see what was modified in the last update for each page? Also, how can a group contribute to the documentation as it goes learning new things from the API? And last but not least, how do we modify the scratchpad? Is it by stating things here? (This one is probably fo