Security evaluation of MQTT protocol

In this article, we discuss the security of MQTT and we check the key exchange problems and provide a solution for it MQTT is a publish protocol where each client can subscribe to a message thread to receive all messages published under this topic. Message payloads can be encrypted to hide private information. However, to forward a message, the subject of the message must be read by the broker and therefore cannot be encrypted and can be disclosed personal information. MQTT may be a convention, where clients can subscribe to a central broker in arrange to get a particular sort of message identified by the message’s theme