search

TheSpaghettiDetective / OctoPrint-Obico

GNU Affero General Public License v3.0
138 stars 41 forks source link

[Feature] Option to disable tunneling #161

Open ajs256 opened 2 years ago

ajs256 commented 2 years ago

Is your feature request related to a problem? Please describe. n/a

Describe the solution you'd like I would like an option to disable tunneling for TSD. This would be useful to keep my home network secure.

Describe alternatives you've considered

kennethjiang commented 2 years ago

We can add this option. But please remember disabling tunneling doesn't add much to the overall security. On TSD cloud, the tunneling is using the existing communication channel needed for other TSD functions. If the communication channel is compromised, the overall security is compromised even if the tunneling is disabled.

But I do agree having an option to disable tunneling will offer some psychological comfort to many users. In the mean time, it feels a little deceptive to me, for the reason stated above.

Note: the self-hosted TSD server is using an authentication for the tunneling that is different from the TSD cloud, primarily because most self-hosted TSD server won't be able to do wild-card sub-domain resolution.