johner Posted March 20, 2017 Share Posted March 20, 2017 Adding users without encryption will expose user windows passwords to potentially localised malware etc. This also forces Unraid admins to use VPN to provide remote access for support on ALL remote devices (Internet Cafes machines, smart phones etc.) Quote Link to comment
JonathanM Posted March 20, 2017 Share Posted March 20, 2017 Admin UI is currently being overhauled. Wait until 6.4 beta series becomes public, and see if you still have concerns. Quote Link to comment
Squid Posted March 20, 2017 Share Posted March 20, 2017 Pretty sure it'll have https support as it's already been announced that its switching to nginxSent from my LG-D852 using Tapatalk Quote Link to comment
JonathanM Posted March 20, 2017 Share Posted March 20, 2017 4 hours ago, johner said: Adding users without encryption will expose user windows passwords to potentially localised malware etc. This also forces Unraid admins to use VPN to provide remote access for support on ALL remote devices (Internet Cafes machines, smart phones etc.) Also, while I agree with your first statement, that SSL is an improvement for local security, I really don't see a good reason to expose the admin UI to the internet without a VPN, even when we get SSL. Security is hard to get right, we have to be perfect all the time and the bad guys only have to get lucky once. The more layers the bad guys have to penetrate to get to my private data the better. A good VPN is just good security practice. 1 Quote Link to comment
-Daedalus Posted March 22, 2017 Share Posted March 22, 2017 On 20/03/2017 at 2:27 PM, jonathanm said: Admin UI is currently being overhauled. Wait until 6.4 beta series becomes public, and see if you still have concerns. I realise this is off-topic, but are you allowed to give any indication of when this might happen? Quote Link to comment
JonathanM Posted March 22, 2017 Share Posted March 22, 2017 4 minutes ago, -Daedalus said: I realise this is off-topic, but are you allowed to give any indication of when this might happen? I have no inside knowledge, I'm a user just like you, but with lots of experience. My long experience tells me it will happen when it happens. No point in speculating or begging or whining or threatening, it just is. If you want an educated guess, anywhere from 1 to 3 months away. Hopefully I'm wrong. Quote Link to comment
-Daedalus Posted March 22, 2017 Share Posted March 22, 2017 4 hours ago, jonathanm said: I have no inside knowledge, I'm a user just like you, but with lots of experience. My long experience tells me it will happen when it happens. No point in speculating or begging or whining or threatening, it just is. If you want an educated guess, anywhere from 1 to 3 months away. Hopefully I'm wrong. Ah, thought you might be part of their internal tester group or something, mainly as I hadn't heard anything about a UI overhaul. Quote Link to comment
ljm42 Posted March 22, 2017 Share Posted March 22, 2017 Tom just confirmed https in 6.4! https://forums.lime-technology.com/topic/55975-is-unraid-really-unsecure/#comment-547622 Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.