Jumoo / jumoo-docs

Documentation for uSync and Translation manager
https://docs.jumoo.co.uk
0 stars 9 forks source link

uSync.Complete - ForceHost Option #9

Closed KevinJump closed 1 year ago

KevinJump commented 1 year ago

https://github.com/Jumoo/uSync.Complete.Issues/issues/186#issue-1328450179

In the Publisher options https://docs.jumoo.co.uk/usync/complete/publisher/config

there are two new things

IncludeHost

Includes the host name as part of the signiture when signing requests between sites, default is true.

Needs some warning : Turning this value off - is in theory less secure because requests to one server (e.g stage) could be replayed on another server (e.g live) if those messages were intercepted. This is very unlikely to be possible on your setup but it is an additional risk.

ForceHostOption:

By default uSync will check signitures with an without the host name included, default value is false, if this is true then the host name will be required - as part of the sync.