Pierre Kancir

You can remove on ArduPilot : if you are speaking of status_text that is only debug information, mostly send when you got a failure, you cannot do anything with that...

Hello, I don't understand the point of this ticket... It is clearly stated that mavlink 1.0 protocol doesn't provide any system of authentification.... So this vulnerability isn't one... About mavlink2.0...

That is only an issue if you are using mavlink protocol with SiK or RFD like radio ( even if this have aes encryption) because they are serial over the...

If you are using UDP then the transport layer is UDP not mavlink ... As I said, if you want to use a some encryption you are free to do...

then please open a CVE for : - Wifi - Bluetooth - TCP - UPD - TCP/IP socket - UART - CAN - I2C - SPI - 3G/4G/5G - Lora...

Just encode your mavlink message, then crypt it with the algorithm you want and send it on UART... This has nothing to do with mavlink protocol

Yes, encryption always come with some CPU usage

such as any non-encrypted communication. If you want encryption, just use encryption on your transport layer. if you chose to send raw tcp socket with mavlink message over the net,...

Hello, Indeed, the wiki Is not clear on this, the binaries are in build/sitl/bin

@Hwurzburg yep, we don't have the .elf and the wiki is also wrong at mentioning that the binary will by in vehicle directory like ./ArduCopter !