Is connection between server and remote client "secure"?

[simonselmer 27]

Hi

 

I have a paranoid friend   who would like to use my Emby server, but is worried if it's safe to use.

Meaning when he browses my library and stream from me, is the ISP or anyone else between us (except NSA, they see everything) able to see and track what he watches from me?

 

In the server settings, there is a setting called "Secure connection mode". Does that mean if I enable that, and set to "Required for all remote connections", then I'm sure that everything is encrypted between my server and all remote clients?

 

Or does it take more to have a secure connection, like using SSL certificates, which I have no idea how to use.

 

Regards Simon

[Spaceboy 2573]

Hi

 

I have a paranoid friend who would like to use my Emby server, but is worried if it's safe to use.

Meaning when he browses my library and stream from me, is the ISP or anyone else between us (except NSA, they see everything) able to see and track what he watches from me?

 

In the server settings, there is a setting called "Secure connection mode". Does that mean if I enable that, and set to "Required for all remote connections", then I'm sure that everything is encrypted between my server and all remote clients?

 

Or does it take more to have a secure connection, like using SSL certificates, which I have no idea how to use.

 

Regards Simon

if you are not using secure connections (https) then yes isp etc can see the content. Using secure encrypts this but you will need a valid ssl cert so you don’t get the security error in the browser. On the browser you can ignore this but on a device such as a shield or fire tv you will need a valid ssl so the device can trust the connection.

 

You could also use a vpn

[Guest asrequested]

Your buddy won't have any issues accessing your server. It's you, as the server operator that could have concerns. For him, it's like watching Netflix. For you, it's about copyright infringement and whether you might get hacked. None of that should affect, him. I've chosen to run everything behind a VPN. That way all traffic is made generic and everything goes through their server, so you don't get traced.

[chef 3810]

Use nginx or caddy to create a reverse proxy and get https enabled.

 

Caddy will create a certificate that is fro. A recognized cert authority for free and keep it up to date for you.

[Spaceboy 2573]

Use nginx or caddy to create a reverse proxy and get https enabled.

 

Caddy will create a certificate that is fro. A recognized cert authority for free and keep it up to date for you.

personally I followed this guide to use nginx and cloudflare. Written by a member here https://blog.awelswynol.co.uk/2018/01/setting-up-cloudflare-with-emby Edited May 23, 2019 by Spaceboy

[pwhodges 2012]

I use Caddy - piece of cake.  To give an idea how easy, this is a sufficient Caddy configuration file:

emby.mydomain.org {
	proxy / http://localhost:8096
}

My real one specifies logging:

emby.mydomain.org {
	proxy / http://localhost:8096
	log .\Logs\EMaccess.log
	errors .\Logs\EMerror.log
}

As I was already running it for other purposes, it was a no-brainer for me; but I suppose I could write a guide, if anyone wanted...

[mtlbrownsugar 2]

Your buddy won't have any issues accessing your server. It's you, as the server operator that could have concerns. For him, it's like watching Netflix. For you, it's about copyright infringement and whether you might get hacked. None of that should affect, him. I've chosen to run everything behind a VPN. That way all traffic is made generic and everything goes through their server, so you don't get traced.

@ I am new to Emby and I usually run all my traffic at home through a VPN. But I have been unable to get the remote access to work through the VPN. I have looked at several sets of instructions on how to run Emby with a VPN and have been unsuccessful. If you have a link with instructions on how I could accomplish this I would greatly appreciate it. Thanks in advance.  

[Guest asrequested]

@ I am new to Emby and I usually run all my traffic at home through a VPN. But I have been unable to get the remote access to work through the VPN. I have looked at several sets of instructions on how to run Emby with a VPN and have been unsuccessful. If you have a link with instructions on how I could accomplish this I would greatly appreciate it. Thanks in advance.  

 

I use TorGuard. I made a guide for it.

 

https://emby.media/community/index.php?/topic/55137-how-to-run-emby-behind-torguard-vpn/

[Happy2Play 9780]

@ I am new to Emby and I usually run all my traffic at home through a VPN. But I have been unable to get the remote access to work through the VPN. I have looked at several sets of instructions on how to run Emby with a VPN and have been unsuccessful. If you have a link with instructions on how I could accomplish this I would greatly appreciate it. Thanks in advance.  

Every service is different.  It is a matter of whether your service allows port forwarding.

[mtlbrownsugar 2]

I use TorGuard. I made a guide for it.

 

https://emby.media/community/index.php?/topic/55137-how-to-run-emby-behind-torguard-vpn/

@Doofus  Thank you so much for the guide! I currently use IPvanish, hopefully, they will give me the same access you have with your company of choice. You're a life saver.

[Teknician 4]

@mtlbrownsugar

The VPN I used for a while, that worked great was Purevpn with their port forwarding add-on. Connected thru Bangladesh (p2p) server and worked fantastic. Now I do use an ssl cert, which I thought was a better route, but PureVPN did work just fine and inexpensive.