Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add ability to use UNIX domain sockets for improved security. (can we even do this on Android?) #3

Open
3 tasks
RangerMauve opened this issue Mar 7, 2022 · 0 comments
Open
3 tasks

Add ability to use UNIX domain sockets for improved security. (can we even do this on Android?) #3

RangerMauve opened this issue Mar 7, 2022 · 0 comments

Comments

@RangerMauve
Copy link
Member

RangerMauve commented Mar 7, 2022 •
edited by makew0rld
Loading

Raw HTTP handlers can open us to side-channels for talking to the IPFS daemon, ideally we should scope it to just allowing Agregore Mobile to talk to the gateway.

  • Check if we can use UNIX domain sockets on Android
  • Listen on UNIX domain sockets in the daemon (Added in 97742dd but then reverted in 7e29d9b)
  • Have some sort of scoped socket identifier to the Agregore Mobile app?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@RangerMauve