search

functionland / fula-archived

Client-server stack for Web3! Turn your Raspberry Pi to a BAS server in minutes and enjoy the freedom of decentralized Web with a superior user experience!
https://fx.land
MIT License
4 stars 0 forks source link

API access control. #254

Open farhoud opened 1 year ago

farhoud commented 1 year ago

File protocol does not have access control. So if you connect it to public network any one can use it to upload and download from them.

gitaaron commented 1 year ago

So currently if I run the cluster with docker-compose it is not connected to the public network?

However, if we wanted to make it available to signalling server then we would have to make it available to the public network?

Is it the bootstrap server list that determines that?

ehsan6sha commented 1 year ago

@farhoud can you elaborate a bit? When we say File Protocol does not have access control? I mean right now, we encrypt the file and upload it, and then when we share we go through the security layer that Jamshid designed. what part is still not encrypted?

farhoud commented 1 year ago

@gitaaron currently its disabled in code for bootstraps but wrtc still connect box to network which should be removed.

@farhoud can you elaborate a bit? When we say File Protocol does not have access control? I mean right now, we encrypt the file and upload it, and then when we share we go through the security layer that Jamshid designed. what part is still not encrypted?

@ehsan6sha you can not control who is connecting to your box, data is encrypted but anybody in the network can use any box as their storage.