cuberite / cuberite

A lightweight, fast and extensible game server for Minecraft
https://cuberite.org
Other
4.98k stars 636 forks source link

Secure RCON #2273

Open madmaxoft opened 9 years ago

madmaxoft commented 9 years ago

The RCON protocol is insecure, as in "passwords are sent in cleartext". We need to implement a better variant that uses encryption. Hand in hand with that we need a client that would be able to speak such protocol. Ideally, this should be a bridge that would connect to the remote RCONS with encryption and provide a localhost RCON (without encryption) socket that would relay all the commands to the encrypted one.

worktycho commented 9 years ago

SSH? But seriously, we could just wrap the entire thing in an ssl socket and switch it to a different port like FTPS and HTTPS.