Webserver Security

09 Nov 2012

Im designing a product that will be connected to the internet, as with many things connected to the internet i'm interested in how secure my product is going to be. I've currently written the software using the inbuilt httpserver and RPC libraries. But reading the documentation I see nothing on security. What have people done to implement security to webservers that they have used? I would be interesting in using basic authentication if it would be possible.

TIA

D.

11 Nov 2012

You may want to look into encrypting your data before sending, then decrypt the data on the receiving side once the data is received. Do a search for encryption on the code section of the mbed website. Your search should result in encryption library's that you can include in your project.

12 Nov 2012

I'm going to be a nag, but someone has to be:

  • mbed needs a clear tutorial on how to do security properly on these devices, and the right software libraries to do it.

Security is so easy to get wrong, that it shouldn't to Frankenstein personal experimentation, although of course the latter is valuable in gaining understanding.

I asked a similar question recently:

http://mbed.org/forum/mbed/topic/3823/

But again the result wasn't satisfactory.

I'd love to building a repeatable, tested, security framework but I don't have much time, so I hope someone else beats me to it :)

We could look at starting a kickstarter project?

Ashley