search

jhonnymonclair / dnsexit

Python client for DNSEXIT Dynamic Dns Service
3 stars 6 forks source link

Use HTTPS rather than HTTP when updating server #3

Open Atheros1 opened 3 years ago

Atheros1 commented 3 years ago

The client is currently sending the user's password in plaintext. There is no reason to do this; the server supports HTTPS.

Atheros1 commented 3 years ago

Note that IP lookup still uses HTTP because HTTPS isn't yet supported with the currently used IP-lookup servers; this is a security risk that dnsexit needs to fix or we need to find and use different IP-lookup servers.

jhonnymonclair commented 3 years ago

Thanks for your contribution, actually my target was to stick to the original Perl version by Dnsexit people as much as possible and to share just a Python canvace for others to improve.

Atheros1 commented 3 years ago

I understand. The dnsexit website, though, is linking to your project. If you don't want to maintain it, it might be good to say so at the top of the Readme so that people know that the project is not maintained and not secure. Someone might be interested in maintaining it.