17217 - Web interface security issues external access

[Montoya]

With the release of 17217 with web interface, do we get the same security issues we had with DVBLink, that non-tech minded TVMosaic users leave their TVMosaic server wide open to the internet, when they have “on the go”/WAN access enabled ?

Still a lot of DVBLink servers are to be found which are accessible by web interface, be just using a search engine...
Just query "TV guide - DVBLink" in Google and you will be surprised....

I expect the same happening now with this new version of TVMosaic with web interface, so this is very BAD

So what are the plans to finally incorporate https access with SSL, so DVBLogic takes responsibility of this security issue, without hiding that it is the users responsibility to make TVMosaic access safe

We need options in TVMosaic settings provided by DVBLogic, to make that access safe.
Plex and Emby already provides https access with SSL, so step up DVBLogic, take responsibility and put this also on your roadmap with HIGH priority

In my humble opinion, the web interface shouldn't be introduced, when secure access is not available or fixed.

[muppets4]

I would like to know the answer to this crucial question too. My server is on 24/7, like many of us have.

[Oberon]

It is planned in one or another form.

[Montoya]

It is planned in one or another form.

Could you consider making secure acces in TVMosaic just as easy as this guide (Emby https access with SSL) ?
https://blog.awelswynol.co.uk/2018/01/s ... -with-emby

So users could use a free Cloudflare signed SSL certificate in TVMosaic and use all security options available with a free Cloudflare account and set that up in TVMosaic settings page, with domain, which ports to use and with the option to load a pxf certificate and input password for that pxf in TVMosaic settings.

Emby.PNG (129.16 KiB) Viewed 167 times

[Oberon]

It will be something lie that. But, if you ask me, this guide is far from being easy for an average user.
The way how Plex does it is easy, but it requires the resources, which we do not have.