Simon Bernard

I think this question is maybe a bit related to : https://github.com/eclipse/wakaama/issues/617

(Just some thought about this, maybe a security audit about Leshan would be a better investment rather than a LWM2M specification compliance one)

> This should be solved by making sure the Client uses the Appendix B.2 procedure defined in the OSCORE RFC here: https://datatracker.ietf.org/doc/html/rfc8613#appendix-B.2 I don't know what should be done in...

@rikard-sics I would really appreciate if we can find a fix (or at least workaround) for this. :pray:

I try to investigate on this. > I don't know what should be done in the code to be sure that appendex B.2 is used ? Looking at [cf test](https://github.com/eclipse/californium/blob/3.5.0/cf-oscore/src/test/java/org/eclipse/californium/oscore/ContextRederivationTest.java#L144-L147),...

Again, I let the team decide on this. https://github.com/eclipse/wakaama/issues/513#issuecomment-763513438 sounds related to this point.

Hi all, I have some concerns about the current plan. I think I should really move forward concerning #1025 and so we need maybe a less ambitious plan. (Above I...

:heavy_check_mark: **1.** is done (https://github.com/eclipse/leshan/issues/1265#issuecomment-1176250115) I will work on **2.** (trying to integrate `oscore` branch in `master`)

I tried to investigate on #1257 without success :disappointed: (https://github.com/eclipse/leshan/issues/1257#issuecomment-1178988829) So I integrated `oscore` in `master` (#1277) as planned, meaning : :heavy_check_mark: **2.** is done. I will now work on...

:heavy_check_mark: **3.** is done with : - #1281 - #1282 - #1285 I will be unavailable next days back on Monday. @rikard-sics if you find a solution for #1257 for...