MQTT over TLS (MQTTS) in IOT Protocols - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does MQTT over TLS (MQTTS) provide compared to plain MQTT?

MQTT over TLS (MQTTS) adds encryption and security by using TLS (Transport Layer Security) to protect data during transmission, ensuring privacy and data integrity.

beginner

Which port is commonly used for MQTT over TLS (MQTTS)?

The default port for MQTT over TLS (MQTTS) is 8883, unlike plain MQTT which usually uses port 1883.

intermediate

What is the role of certificates in MQTT over TLS?

Certificates authenticate the server and optionally the client, helping to establish a trusted encrypted connection between devices.

intermediate

How does MQTT over TLS protect against eavesdropping?

TLS encrypts the data sent between client and broker, so attackers cannot read the messages even if they intercept the network traffic.

advanced

What is a simple command to test an MQTT over TLS connection using mosquitto_sub?

mosquitto_sub -h broker.example.com -p 8883 --cafile ca.crt -t 'test/topic' -d

Which port is standard for MQTT over TLS (MQTTS)?

A 8883

B 1883

C 443

D 80

Port 8883 is the default port reserved for MQTT over TLS, while 1883 is for plain MQTT.

What does TLS provide in MQTT over TLS?

A Message compression

B Encryption and authentication

C Faster message delivery

D Topic filtering

TLS ensures the connection is encrypted and authenticated, protecting data privacy and integrity.

Which file is needed to verify the broker's identity in MQTT over TLS?

A Client private key

B Broker log file

C MQTT topic list

D CA certificate file

The CA certificate file is used to verify the broker's TLS certificate to establish trust.

What happens if you try to connect to an MQTT broker over TLS without the correct CA certificate?

A Messages are sent in plain text

B Connection succeeds without encryption

C Connection fails due to untrusted server

D Client automatically downloads the certificate

Without the correct CA certificate, the client cannot verify the broker's identity, so the connection is rejected.

Which command option specifies the CA certificate file in mosquitto clients?

A --cafile

B --certfile

C --keyfile

D --topic

The --cafile option tells the client which CA certificate to use for verifying the broker.

Explain how MQTT over TLS (MQTTS) secures communication between devices.

Think about what TLS adds to the basic MQTT protocol.

Describe the steps to test an MQTT over TLS connection using a command line tool.

Focus on the command options needed for TLS.