Secure incoming Reading requests

[ambergristle]

Safeguard service resources and protect data integrity by ensuring Reading requests come from registered clients.

What

• An authentication protocol to verify request clients.
• Defense against oversized payloads.

Considerations

• To what extent can this solution overlap with: Secure outbound webhook calls #5?
• Persistence of some kind will be necessary for a scalable solution, but not necessarily for MVP.
• Could use a VLAN to isolate device network use.

References

• https://www.ssh.com/academy/ssh-keys
• https://github.com/TykTechnologies/tyk
• https://github.com/NatLabRockies/api-umbrella