[Iot-onboarding] Some new stuff for mudmaker.org

[Eliot Lear <[e-mail]>]

Hi everyone,

As part of mudding, I’ve been talking to the SBOM people.  These are the folk who are looking to produce a software bill of materials for IOT devices.  The question: how to find it?  Well, MUD to the rescue.  I’ve added a very simple extension (no draft yet but working on it) that would describe just how to get the SBOM.

While I was at it…

I also made some changes as to what happens when you click on the “download” button.  Not only do you get a MUD file, but you also get a DEMO CMS signature file as well.  If you trust this signature for anything other than demonstration purposes, well…

I also have now a demonstration QR code that contains the MUDURL alone.  This would be suitable for sticking on a box or otherwise providing legacy equipment folk.  I have some issues with this.  The first is that just scanning it on your iPhone gets you a JSON file.  From a tooling perspective… that’s not slick.  Also, it’s sometimes unnecessary, given what Michael is planning, and what is going into DPP.  Also, I’m currently using a questionable Google API to generate the QR code.  But as I am a questionable guy, and this is really for demonstration purposes, I think this is ok.

You can try all of this out at https://mudmaker.org/sbom.

I am NOT quite ready to roll any of this out onto the main mudmaker page, but would very much appreciate your comments.

Eliot