204
How would you expose Jellyfin securely without a vpn? (discuss.online)
submitted 3 months ago by to c/selfhosted@lemmy.world
199 comments fedilink hide all child comments
 

Assuming the user will not be connecting over vpn, but is both remote and non-technical, how would you expose Jellyfin to them securely?

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 3 months ago (2 children)

Im confused as to what people think the security issue is? Do they think someone will brute force their username and password with a billion queries?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 3 months ago

    That’s assuming an attacker will play nice with URL forming and discovering edge cases in POSTing shaped data to the service. Just encrypting is still weak security if the whole front-end web and API surface isn’t hardened.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 3 months ago (1 child)

    Afraid people will use known vulnerabilities in common self-hosted software.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •