search

HirbodBehnam / Shadowsocks-Cloak-Installer

A one-key script to setup Cloak plugin with Shadowsocks on your server
GNU General Public License v3.0
408 stars 85 forks source link

Encryption #46

Closed linehman closed 1 year ago

linehman commented 1 year ago

Hi, I just installed this using the script command provided with all default options, and everything is working allright. I was checking the config files in /etc/cloak and noticed that in both "ckadminclient.json" and "shadowsocks.json" , the "EncryptionMethod" is set to "plain". So is the encryption off by default or did I do something wrong? if there is anyway to increase the security please advise. thank you

HirbodBehnam commented 1 year ago

Hello ckadminclient.json is only used by admin panel of the script so it does not need encryption at all. For shadowsocks, from cloak's documentation, it says that it does not need encryption because shadowsocks itself encrypts its packets. I'd also like to note that encryption is configured from client. So your clients can turn it on or off without needing you to do anything from server.

linehman commented 1 year ago

Thanks for the explanation. I found this article about china firewall being able to detect shadowsocks https://gfw.report/talks/imc20/en/ , So I turned the cloak encryption on too just to be sure.