[hono-dev] Question regarding connection events

["Morson, Stefano" <stefano.morson@xxxxxxxxxxxx>]

Hi all,

We were discussing about the latest work in Hono regarding connection events in the perspective of integrating with Kapua lifecycle events. 

For the current implementation, correct me If I’m wrong, Hono connection events are (optionally) generated by the (Mqtt)Adapter and sent as events to the event/tenant address. We were wondering whether it would be possible for a device to purposely create and send a (fake) connection event. If so the next question is if there's a requirement in Hono to prevent such behavior by enforcing some kind of authorization or if it is the downstream application that have to handle the case. Finally in the latter case if there's a mechanism to distinguish the source of the connection event. 

Stefano