[DiscordArchive] Noticed that the only protocol supported with SOAP is HTTP. Are there any plans to offer SSL to make
[DiscordArchive] Noticed that the only protocol supported with SOAP is HTTP. Are there any plans to offer SSL to make
Archived author: Guybrush • Posted: 2022-12-28T22:08:43.212000+00:00
Original source
Noticed that the only protocol supported with SOAP is HTTP. Are there any plans to offer SSL to make it a bit safer?
Archived author: jackpoz • Posted: 2022-12-28T22:28:11.882000+00:00
Original source
you could put it behind a reverse proxy with HTTPS
Archived author: jackpoz • Posted: 2022-12-28T22:28:34.187000+00:00
Original source
but in a way you might not even want to expose that outside of localhost
Archived author: jackpoz • Posted: 2022-12-28T22:28:42.863000+00:00
Original source
I wouldn't
Archived author: Tea • Posted: 2022-12-28T22:29:03.338000+00:00
Original source
gsoap actually supports ssl, we use it in master branch (but not for soap, as a half assed https server for bnet)
Archived author: Tea • Posted: 2022-12-28T22:29:19.204000+00:00
Original source
but it does need explicit function calls
Archived author: Guybrush • Posted: 2022-12-28T22:32:33.610000+00:00
Original source
yeah, dns rebinding makes that pretty dangerous
Archived author: jackpoz • Posted: 2022-12-28T22:33:07.380000+00:00
Original source
I expose grafana http with apache on https, works fine
Archived author: Guybrush • Posted: 2022-12-28T22:34:12.507000+00:00
Original source
it may seem like small potatoes to even worry about, since anyone trying to use SOAP likely also has a 10 year web interface written in PHP 5.4
Archived author: Guybrush • Posted: 2022-12-28T22:35:02.744000+00:00
Original source
was adding some documentation to the wiki, since I saw someone added it to the old confluence, but it needed some TLC