2 ms·
It'd like to broaden this question: Why is there almost nowhere a straight-forward option to limit network access? Even backend app containers like Docker, whi
by xg15 5y ago
It'd like to broaden this question: Why is there almost nowhere a straight-forward option to limit network access?
Even backend app containers like Docker, which are all about restricting permissions and maintaining a sandbox, allow arbitrary outgoing connections by default.
- ermir 5y agoIt's because if you only allow an app to access an approved and whitelisted API endpoint, that endpoint can trivially implement a proxy and essentially act as a gateway to the open internet.