You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@plc4x.apache.org by "potiuk (via GitHub)" <gi...@apache.org> on 2026/06/03 21:17:36 UTC

Re: [PR] Add draft project security threat-model document

potiuk commented on PR #2575:
URL: https://github.com/apache/plc4x/pull/2575#issuecomment-4616794702

   Thanks @sruehl. Fair point — you're right that in practice a lot of OT/PLC deployments run unauthenticated, and the draft over-weights PlcAuthentication. It's the driver-layer credential abstraction for the few protocols that do carry auth (e.g. OPC UA user/password, TLS client certs), but if it's rarely used in the field I'm happy to demote it from a primary boundary to a "where present" note and lead instead with the unauthenticated-by-default reality as the modeled baseline. I'll push that revision — does that match how you'd frame it?
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@plc4x.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org