<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Custom OOB implementation</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/47453/custom-oob-implementation</link><description>I&amp;#39;ve been going through the nrf mesh Provisioner SDK for android. It has predefined input and output oob models that is selected while provisioning. 
 Is it possible to design a vendor specific OOB implementation (preferably multistep authentication)</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Mon, 20 May 2019 14:12:19 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/47453/custom-oob-implementation" /><item><title>RE: Custom OOB implementation</title><link>https://devzone.nordicsemi.com/thread/187991?ContentTypeID=1</link><pubDate>Mon, 20 May 2019 14:12:19 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:a0122196-0a5b-4ebc-b069-e08bf0d93741</guid><dc:creator>Roshan Rajaratnam</dc:creator><description>&lt;p&gt;The latest version of the Android sdk lets you pick whatever authentication method supported by the device. As far as I am aware the specification does not mention anything about custom authentication mechanisms, but you will have to check to be sure. If you think the authentication steps provided by the spec is not secure enough you may consider implementing your own. Also adding your own authentication methods will introduce a liability on your end for it to be secure. However you should also consider the usability point where you don&amp;#39;t want to bog down the user making it way too complicated to setup these devices in my opinion setting up should be secure and faster.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>