SSL Question

[MSattler 390]

So for those of us in the US, since Congress has now decided to completely give away all our privacy data to anyone willing to pay, are we at a point where we can force all Emby traffic to be SSL based?

 

It is a bit worrisome as pretty much anyone can now get at our browsing/network traffic history, and from an Emby perspective that could potentially lead to issues.  It would be nice to have an option to force all clients to use SSL, and to force HTTP web trafic to emby to be redirected to SSL.

 

Maybe this is a feature already and I am missing it?  I know I could just shut down 8096 on my router, but I would rather that traffic be auto redirected to SSL by Emby.

 

Thoughts?

 

thanks!

[chef 3810]

You are talking about remote clients login in through the public IP? Right?

 

I'm not sure if the same things happen in Canada as the new laws passed in the us, but I wonder if maybe the us government is more interested in security and protection of its citizens, then weather or not a family member is streaming a movie.

 

with that said, protecting personal data is always a priority.

 

Edited March 31, 2017 by chef

[MSattler 390]

You are talking about remote clients login in through the public IP? Right?

 

exactly, I should have been more specific.  I forget not everyone has kids who watch stuff remotely at the other parents =)

 

I see the option to report HTTPS as the external address.  That helps, but anyone going to 8096, would still be able to connect that way from a browser.

 

It would also be good to know which Apps work with HTTPS, and which don't.

[Luke 42085]

The apps all support SSL the question is which devices will accept your SSL cert. A Let's Encrypt cert will generally be broadly accepted.

[zigzagtshirt 55]

So for those of us in the US, since Congress has now decided to completely give away all our privacy data to anyone willing to pay, are we at a point where we can force all Emby traffic to be SSL based?

 

It is a bit worrisome as pretty much anyone can now get at our browsing/network traffic history, and from an Emby perspective that could potentially lead to issues.  It would be nice to have an option to force all clients to use SSL, and to force HTTP web trafic to emby to be redirected to SSL.

 

Maybe this is a feature already and I am missing it?  I know I could just shut down 8096 on my router, but I would rather that traffic be auto redirected to SSL by Emby.

 

Thoughts?

 

thanks!

 

 

Congress voted to undo regulations that have not yet taken effect anyway.  The status quo will remain the same.  Nothing is changing.