TLS 1.3 is going to save us all, and other reasons why IoT is still insecure
Dec 24, 2017Dani Grant

Summary
This post highlights the growing threat of DDoS attacks originating from compromised IoT devices and identifies two key security challenges: unreliable software updates for IoT devices and the overhead associated with traditional TLS implementations. It proposes network-level filtering as a solution for update issues and advocates for TLS 1.3, elliptic curve cryptography, and secure protocols like MQTT/CoAP with DTLS to address TLS-related challenges in IoT, thereby extending Cloudflare's security focus to the burgeoning IoT landscape.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack