aMule Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

We're back! (IN POG FORM)

Author Topic: Amuleweb via HTTPS  (Read 6941 times)

gaglia

  • Jr. Member
  • **
  • Karma: 0
  • Offline Offline
  • Posts: 63
Amuleweb via HTTPS
« on: December 12, 2007, 10:15:02 AM »
I was wondering if it would be too difficult to encrypt all the http traffic in amuleweb. I think it'd be an interesting security improvement in certain circumstances!
Logged

AndreAPL

  • Approved Newbie
  • *
  • Karma: 0
  • Offline Offline
  • Posts: 14
Re: Amuleweb via HTTPS
« Reply #1 on: December 15, 2007, 12:40:18 PM »
I would also this. Or is any way to make it safer ?
Logged

lfroen

  • Guest
Re: Amuleweb via HTTPS
« Reply #2 on: December 18, 2007, 08:26:30 AM »
Quote from: gaglia on December 12, 2007, 10:15:02 AM
I was wondering if it would be too difficult to encrypt all the http traffic in amuleweb. I think it'd be an interesting security improvement in certain circumstances!
And use self-signed certificate? So Firefox will complain every time you open the page?
Logged

gaglia

  • Jr. Member
  • **
  • Karma: 0
  • Offline Offline
  • Posts: 63
Re: Amuleweb via HTTPS
« Reply #3 on: December 18, 2007, 07:36:28 PM »
Quote from: lfroen on December 18, 2007, 08:26:30 AM
Quote from: gaglia on December 12, 2007, 10:15:02 AM
I was wondering if it would be too difficult to encrypt all the http traffic in amuleweb. I think it'd be an interesting security improvement in certain circumstances!
And use self-signed certificate? So Firefox will complain every time you open the page?

Only the first time if you accept the certificate permanently.
Logged

lfroen

  • Guest
Re: Amuleweb via HTTPS
« Reply #4 on: December 20, 2007, 08:25:42 AM »
OK, feature request granted. I'll see what I can do. Anyway, not before 2.2.0.
Logged

gaglia

  • Jr. Member
  • **
  • Karma: 0
  • Offline Offline
  • Posts: 63
Re: Amuleweb via HTTPS
« Reply #5 on: December 20, 2007, 11:49:24 AM »
Thank you :)
Logged

GrayFox.i0n

  • Full Member
  • ***
  • Karma: 2
  • Offline Offline
  • Posts: 139
Re: Amuleweb via HTTPS
« Reply #6 on: December 28, 2007, 07:51:16 AM »
+1
Logged

Crakem

  • Full Member
  • ***
  • Karma: 2
  • Offline Offline
  • Posts: 103
Re: Amuleweb via HTTPS
« Reply #7 on: December 30, 2007, 04:54:40 PM »
Quote from: gaglia on December 20, 2007, 11:49:24 AM
Thank you :)
Connecting to amuleweb through HTTP or HTTPS at request will be a high security improvement for amuleweb. Without encrypted connections somebody could sniff you password for amuleweb. Good idea gaglia!
Logged

Nodsu

  • Jr. Member
  • **
  • Karma: 3
  • Offline Offline
  • Posts: 62
Re: Amuleweb via HTTPS
« Reply #8 on: December 30, 2007, 06:29:36 PM »
Note that you can use any SSL wrapper program or proxy for this right now.. Starting from the Apache behemoth and ending with specialised little proggies like stunnel.
« Last Edit: December 30, 2007, 06:31:15 PM by Nodsu »
Logged

gaglia

  • Jr. Member
  • **
  • Karma: 0
  • Offline Offline
  • Posts: 63
Re: Amuleweb via HTTPS
« Reply #9 on: December 30, 2007, 07:28:22 PM »
Well, yes, but i suppose that installing a standalone SSL local proxy just to encrypt connections for amuleweb might be somehow cumbersome, expecially on low cost/power/performance machines where usually amuleweb runs.

However, yes, it might be a valid temporary solution ^^
Logged

gaglia

  • Jr. Member
  • **
  • Karma: 0
  • Offline Offline
  • Posts: 63
Re: Amuleweb via HTTPS
« Reply #10 on: July 21, 2008, 10:34:49 PM »
 ;D
Logged

gaglia

  • Jr. Member
  • **
  • Karma: 0
  • Offline Offline
  • Posts: 63
Re: Amuleweb via HTTPS
« Reply #11 on: October 14, 2008, 08:28:07 PM »
Just a reminder ;)
Logged

wuischke

  • Developer
  • Hero Member
  • *****
  • Karma: 183
  • Offline Offline
  • Posts: 4292
Re: Amuleweb via HTTPS
« Reply #12 on: October 14, 2008, 10:59:34 PM »
Hi gaglia,

I think this is an interesting project (that is implementing TSL, even with the help of OpenSSL or similar), but it requires quite some time and there are more pressing issues with amuleweb right now.

In short: It might happen, but not very soon. I'm sorry. I, however, keep it in mind every time I think about amuleweb.
Logged