You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, the gRPC API is non-authenticated, meaning that anyone could manage the tower if the API was offered outside localhost. This is obviously not safe, so gRPC TLS Auth needs to be added.
In the meantime, the RPC interface MUST NOT be advertised outside localhost.
The text was updated successfully, but these errors were encountered:
@orbitalturtle started working on this in the old python codebase. If you, eager new contributor, are considering tackling this it may be a good idea to take a look at her approach: talaia-labs/python-teos#262
Currently, the gRPC API is non-authenticated, meaning that anyone could manage the tower if the API was offered outside localhost. This is obviously not safe, so gRPC TLS Auth needs to be added.
In the meantime, the RPC interface MUST NOT be advertised outside localhost.
The text was updated successfully, but these errors were encountered: