Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

self signed httpS certificate #157

Open
OmlineEditor opened this issue Mar 18, 2021 · 8 comments
Open

self signed httpS certificate #157

OmlineEditor opened this issue Mar 18, 2021 · 8 comments

Comments

@OmlineEditor
Copy link

Please add a self-signed https certificate to improve security.
Now broadcasting occurs without encryption via http and this is dangerous and not secure
---- RUS ---
Прошу добавить самоподписанный https сертификат для повышения безопасности.
Сейчас трансляция происходит без шифрования по http и это опасно и не безопасно

@dkrivoruchko
Copy link
Owner

I dont see any reason to add HTTPS if it's with not valid certificate.
I will be flooded with questions from users: Why my browser shows that connection is insecure?

@OmlineEditor
Copy link
Author

I dont see any reason to add HTTPS if it's with not valid certificate.
I will be flooded with questions from users: Why my browser shows that connection is insecure?

the problem is not with the certificate. you need encryption and not a certificate. it will always show what is not safe. there are two options, not secure without encryption and not secure with encryption. I choose not secure with encryption. Please think about it.
--- RUS ---
проблема не в сертификате. нужно шифрования а не сертификат. показывать будет всегда что не безопасно. есть два варианта, небезопасно без шифрования и не безопасно с шифрованием. я выбираю не безопасно с шифрованием. Прошу подумать над этим.

@dkrivoruchko
Copy link
Owner

  1. This app does not provide any NAT/PAT bypass, so but default it will work with user controlled local net, so risks for traffic sniffing is small.
  2. To get streaming accessible worldwide you must configure port forwarding on you border router which has public IP. This obviously not a task for regular user. So in such case you can just proxy stream through some http server which will be accessible outside via correct HTTPS.

@OmlineEditor
Copy link
Author

  1. This app does not provide any NAT/PAT bypass, so but default it will work with user controlled local net, so risks for traffic sniffing is small.
  2. To get streaming accessible worldwide you must configure port forwarding on you border router which has public IP. This obviously not a task for regular user. So in such case you can just proxy stream through some http server which will be accessible outside via correct HTTPS.
  1. now the IPv6 protocol is becoming popular and my provider gives it, I wanted to use it. IPv6 requires encryption. I will not use the program only on the local network, I want to use it on the global network to help remote users.
  2. i am an experienced user i know how to do it. I wanted the same users to be able to use your program without fear of traffic interception.
    --- RUS ----
  3. сейчас становится популярным IPv6 протокол и мой провайдер его дает, я хотела его использовать. Для IPv6 нужно шифрование. Я не буду использовать программу только в локальной сети, я хочу ее использовать в глобальной сети для помощи удаленным пользоваелям.
  4. я опытный пользователь я знаю как это сделать. я хотела чтобы такие же пользователи смогли использовать вашу программу без опасения перехвата трафика.

@dkrivoruchko
Copy link
Owner

Well, the only reasonably good option for me now is to add option to import/set certificate to the app server.
Will look in my free time.

@OmlineEditor
Copy link
Author

Well, the only reasonably good option for me now is to add option to import/set certificate to the app server.
Will look in my free time.

open a ticket if you want to do something for httpS

@dkrivoruchko dkrivoruchko reopened this Mar 19, 2021
@LanceCedSolleza
Copy link

Any news about this?

@dkrivoruchko
Copy link
Owner

Noop. I don't have time for this now. If you can - make a PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants