FAQs about Projects
FAQs for projects includes questions about project information.
How long is the validity of the project certs?
2 years.
Who can regenerate the certs?
Team admin or Publisher can regenerate cert for Publishing projects. Team admin/Publisher/Subscriber can regenerate cert for Subscribing projects.
How to encrypt MQTT payloads?
Payload can be encrypted using JSON Web Encryption or JWE. Encrypted value of JWE is represented as the concatenation of the Base64 encoded JWE Protected Header, JWE Encrypted Key, JWE Initialization Vector, JWE Ciphertext, and JWE Authentication Tag separated by “.”
BASE64URL(UTF8(JWE Protected Header)) || ‘.’ ||
BASE64URL(JWE Encrypted Key) || ‘.’ ||
BASE64URL(JWE Initialization Vector) || ‘.’ ||
BASE64URL(JWE Ciphertext) || ‘.’ ||
BASE64URL(JWE Authentication Tag)
For end to end encryption of MQTT payload, the payload should be encrypted on the publisher side and decrypted on the subscriber side, Publisher to generate their own encryption keys and manually passing it to subscribers.
Libraries available for encryption/decryption of JWE
See examples
