▲ 707 ▼ Jellyfin critical security update - This is not a joke (github.com) submitted 4 months ago by Mubelotix@jlai.lu to c/selfhosted@lemmy.world 259 comments fedilink hide all child comments
[–] HK65@sopuli.xyz 2 points 4 months ago (1 child) Standard TLS, I think, but what else would you need? permalink fedilink source parent hideshow 2 child comments replies: [–] kieron115@startrek.website 1 point 4 months ago* (last edited 4 months ago) (1 child) None really, just wondering what the issue with opening it up is if it has TLS? In 10+ years I've never had my Plex server compromised and it just uses TLS. I do change the default port but that's it. permalink fedilink source parent hideshow 2 child comments replies: [–] neclimdul@lemmy.world 2 points 4 months ago (1 child) Plex logins go through their login server so you'll also have login throttling and probably other bot protections. permalink fedilink source parent hideshow 2 child comments replies: [–] kieron115@startrek.website 2 points 4 months ago They also do some SSL shenanigans to get every user a unique, valid public certificate created during setup. https://words.filippo.io/how-plex-is-doing-https-for-all-its-users/ permalink fedilink source parent
[–] kieron115@startrek.website 1 point 4 months ago* (last edited 4 months ago) (1 child) None really, just wondering what the issue with opening it up is if it has TLS? In 10+ years I've never had my Plex server compromised and it just uses TLS. I do change the default port but that's it. permalink fedilink source parent hideshow 2 child comments replies: [–] neclimdul@lemmy.world 2 points 4 months ago (1 child) Plex logins go through their login server so you'll also have login throttling and probably other bot protections. permalink fedilink source parent hideshow 2 child comments replies: [–] kieron115@startrek.website 2 points 4 months ago They also do some SSL shenanigans to get every user a unique, valid public certificate created during setup. https://words.filippo.io/how-plex-is-doing-https-for-all-its-users/ permalink fedilink source parent
[–] neclimdul@lemmy.world 2 points 4 months ago (1 child) Plex logins go through their login server so you'll also have login throttling and probably other bot protections. permalink fedilink source parent hideshow 2 child comments replies: [–] kieron115@startrek.website 2 points 4 months ago They also do some SSL shenanigans to get every user a unique, valid public certificate created during setup. https://words.filippo.io/how-plex-is-doing-https-for-all-its-users/ permalink fedilink source parent
[–] kieron115@startrek.website 2 points 4 months ago They also do some SSL shenanigans to get every user a unique, valid public certificate created during setup. https://words.filippo.io/how-plex-is-doing-https-for-all-its-users/ permalink fedilink source parent