3 ms·
It supports HTTPS. You can also put this behind an nginx which is configured to use https.
by adnanh 9y ago
It supports HTTPS. You can also put this behind an nginx which is configured to use https.
- openasocket 9y agoI don't like insecure defaults. I might remember to take the steps to secure this thing, but not everyone will. They might forget, they might not realize, it might be an innocent mistake, but it will happen. It shouldn't be possible to send commands over an insecure channel. I'm also a bit concerned about the authentication story. You can require the sender to provide a hash signature, but you have to specify the secret in plain text in the webhook config file. That's not best practice. Better would be ldap or Kerberos integration. And again, there should be secure defaults.