Skip to content

Modified to use (self-signed) TLS for increased security

Compare
Choose a tag to compare
@bravecorvus bravecorvus released this 06 Jan 23:11
· 39 commits to master since this release

-Using TLS by default in order to increase security. The site will probably show up as "insecure," but rest be assured, this is much more secure than unencrypted communication through HTTP. According to this article, self-signed certificates provide as much security from man-in-the-middle attacks as CA certificates. Either way, at least the site is encrypted.
-Since adding TLS is not integral to the operation of the front-end (although it makes me sleep alot better after I personally did), I am not adding any directions to the main docs (README's or Wiki's). Instead, the program will try to find the files server.key (private key), and server.crt (public key) in the same directory as the executable. If it't not found, it will revert to serving via non-encrypted protocol while warning the user, and providing the instructions on how to generate these files.