Re: [kuksa-dev] Eclipse Kuksa Release 0.1.0 review documentation

[David Schubert <david.schubert@xxxxxxxxxxxxxxxxx>]

Dear Robert, all,


Security /
Architectural Issues

IMHO our build
scripts for the AGL/Kuksa image are not meant to produce a productive and
secure "product".
For example, the
last time I checked you got an image with a single user (root) and default
credentials. Furthermore, mosquitto is in its default configuration [1],
so no SSL/TLS etc. 


I'm not what we
could mention under Usability Details. Every "feature"
of meta-kuksa should have its own ReadMe. So, could we perhaps just add
corresponding references?

All the best
David

[1] https://github.com/eclipse/kuksa.invehicle/blob/master/agl-kuksa/meta-kuksa/recipes-connectivity/mosquitto/files/mosquitto.conf

__________________________________________

Fraunhofer-Institut für Entwurfstechnik Mechatronik IEM
M.Sc. David Schubert
Wissenschaftlicher Mitarbeiter

Softwaretechnik und IT-Sicherheit
Zukunftsmeile 1
33102 Paderborn

Telefon: +49 5251 5465 -157
Fax: +49 5251 5465-102
david.schubert@xxxxxxxxxxxxxxxxx
https://www.iem.fraunhofer.de
__________________________________________  

Von:
       Robert
Höttger <robert.hoettger@xxxxxxxxxxxxxx>
An:
       kuksa-dev@xxxxxxxxxxx
Datum:
       05.09.2019
15:15
Betreff:
       [kuksa-dev]
Eclipse Kuksa Release 0.1.0 review documentation
Gesendet
von:        kuksa-dev-bounces@xxxxxxxxxxx

---

Dear Eclipse Kuksa developers,

as discussed in our conference call today,
please let me know if you are aware of any information regarding the following
items which need to be included in our release review documentation:

•         API certification
•         Security / Architectural Issues
•         Conformance to UI guidelines (probably not relevant because we do not provide a classic Eclipse IDE)
•         Usability details
•         Standards (MQTT, Hawkbit tokens, keycloak, …)

I
would like to distribute the release review documentation by tomorrow.

Thanks and best regards,
Robert 

==============================
Fachhochschule Dortmund
University of Applied Sciences and Arts
==============================
Robert Hoettger
IDiAL Institute
Otto-Hahn-Str. 23, 44227 Dortmund
room EG 04
phone +49 231 9112-9548
robert.hoettger@xxxxxxxxxxxxxx
www.fh-dortmund.de
==============================

_______________________________________________
kuksa-dev mailing list
kuksa-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe
from this list, visit
https://www.eclipse.org/mailman/listinfo/kuksa-dev