3 ms·
Hosting calendar and contacts on a personal server accessible over the web smells like a potential security nightmare to me. For example, how do you make sure
by cs702 9y ago
Hosting calendar and contacts on a personal server accessible over the web smells like a potential security nightmare to me. For example, how do you make sure that whatever third party tool you use to sync your phone with the web server has been well designed to protect against a large attack surface?
- dsr_ 9y agoYou'll need to be more specific. Is it worse or better than running your own mail server? Your own git repo? Your own VPN server? In what ways, and why?
- acidburnNSA 9y agoI'm sure it's a bit dangerous, but when you run it as done in the article, behind an Apache Reverse Proxy with Apache authentication, you're relying hugely on Apache for the sync security, and that has been well designed to protect against a very large attack surface. Another advantage is that you're just different. So if someone (or some State) attacks a commonly-used service, this will be protected simply by being different.