Project

General

Profile

Forums » General »

Using Digest/Plain Auth -- is it safe?

Added by Gurabli Gurabli over 5 years ago

Hi,
since I need to connect two servers with IPTV over Internet, I need to switch from Digest to Digest and Plain auth mode. I wonder if this is a security issue or not?
I'm tunneling my connection over SSH, but still, TVHeadend is open to plain auth. My user and pass is tunneled over ssh even in plain mode.

Any ideas on this?


Replies (1)

RE: Using Digest/Plain Auth -- is it safe? - Added by Gurabli Gurabli over 5 years ago

I think I solved the security issue!
I had ports opened for direct access to Tvh. Since I'm using ssh tunneling, I don't need direct access anymore. I closed the ports on the router, and the remote Tvh can be reached only over SSH tunnel port forwarding. So basically the auth type doesn't matter in my case, as remote Tvh can only be reached from local network or over encrypted SSL tunnel (which is even safer than Digest). Am I missing something here?

    (1-1/1)