Signed IoT commands over MQTT: why the broker's ACL is not enough
An MQTT broker proves who delivered a command, not who wrote it. Why we sign every device command with a KMS-held key, bind it to one device, and why our first key switch was a wall of rejections.