I notice “gsma fs.38” doesn’t correspond to a known public GSMA document, standard, or widely recognized reference as of my current knowledge.
As you design your next IoT product, open the GSMA FS.38 document (available free on the GSMA website) and check each of the 14 controls. Your future self—and your customers—will thank you.
Furthermore, the guideline’s reliance on "best practices" for application-layer security leaves ambiguity. While FS.38 specifies that transport encryption (TLS 1.2+) must be used, it does not prescribe certificate management infrastructure, often leaving implementers to struggle with the "last mile" of PKI (Public Key Infrastructure) integration. Additionally, critics argue that the document has not yet fully evolved to address the complexities of 5G slicing and massive machine-type communication (mMTC) security, though updates are continuous.
While the GSMA SGP.02 architecture defines the pipes (how data moves), FS.38 defines the cargo (what the data