Security & Privacy should be primary concerns in the design of how data flows within IoT. However, current IoT communication protocols are lacking. This talk explores how secure messaging, decoupled from from the transport layer, removes complexity, minimizes the attack surface and can enable us to build better end-to-end secure and private systems.