aMule Forum

English => Feature requests => Topic started by: gaglia on December 12, 2007, 10:15:02 AM

Title: Amuleweb via HTTPS
Post by: gaglia on December 12, 2007, 10:15:02 AM: I was wondering if it would be too difficult to encrypt all the http traffic in amuleweb. I think it'd be an interesting security improvement in certain circumstances!
Title: Re: Amuleweb via HTTPS
Post by: AndreAPL on December 15, 2007, 12:40:18 PM: I would also this. Or is any way to make it safer ?
Title: Re: Amuleweb via HTTPS
Post by: lfroen on December 18, 2007, 08:26:30 AM: Quote from: gaglia on December 12, 2007, 10:15:02 AM
I was wondering if it would be too difficult to encrypt all the http traffic in amuleweb. I think it'd be an interesting security improvement in certain circumstances!
And use self-signed certificate? So Firefox will complain every time you open the page?
Title: Re: Amuleweb via HTTPS
Post by: gaglia on December 18, 2007, 07:36:28 PM: Quote from: lfroen on December 18, 2007, 08:26:30 AM
Quote from: gaglia on December 12, 2007, 10:15:02 AM
I was wondering if it would be too difficult to encrypt all the http traffic in amuleweb. I think it'd be an interesting security improvement in certain circumstances!
And use self-signed certificate? So Firefox will complain every time you open the page?

Only the first time if you accept the certificate permanently.
Title: Re: Amuleweb via HTTPS
Post by: lfroen on December 20, 2007, 08:25:42 AM: OK, feature request granted. I'll see what I can do. Anyway, not before 2.2.0.
Title: Re: Amuleweb via HTTPS
Post by: gaglia on December 20, 2007, 11:49:24 AM: Thank you :)
Title: Re: Amuleweb via HTTPS
Post by: GrayFox.i0n on December 28, 2007, 07:51:16 AM: +1
Title: Re: Amuleweb via HTTPS
Post by: Crakem on December 30, 2007, 04:54:40 PM: Quote from: gaglia on December 20, 2007, 11:49:24 AM
Thank you :)
Connecting to amuleweb through HTTP or HTTPS at request will be a high security improvement for amuleweb. Without encrypted connections somebody could sniff you password for amuleweb. Good idea gaglia!
Title: Re: Amuleweb via HTTPS
Post by: Nodsu on December 30, 2007, 06:29:36 PM: Note that you can use any SSL wrapper program or proxy for this right now.. Starting from the Apache behemoth and ending with specialised little proggies like stunnel.
Title: Re: Amuleweb via HTTPS
Post by: gaglia on December 30, 2007, 07:28:22 PM: Well, yes, but i suppose that installing a standalone SSL local proxy just to encrypt connections for amuleweb might be somehow cumbersome, expecially on low cost/power/performance machines where usually amuleweb runs.

However, yes, it might be a valid temporary solution ^^
Title: Re: Amuleweb via HTTPS
Post by: gaglia on July 21, 2008, 10:34:49 PM: ;D
Title: Re: Amuleweb via HTTPS
Post by: gaglia on October 14, 2008, 08:28:07 PM: Just a reminder ;)
Title: Re: Amuleweb via HTTPS
Post by: wuischke on October 14, 2008, 10:59:34 PM: Hi gaglia,

I think this is an interesting project (that is implementing TSL, even with the help of OpenSSL or similar), but it requires quite some time and there are more pressing issues with amuleweb right now.

In short: It might happen, but not very soon. I'm sorry. I, however, keep it in mind every time I think about amuleweb.