3 ms·
This is so jank. Why not just text them a password and use HTTP basic auth. It’s built-in on most webservers like nginx.
by NavinF 4y ago
This is so jank. Why not just text them a password and use HTTP basic auth. It’s built-in on most webservers like nginx.
- hatware 4y agoWhy are we putting generic pictures behind auth? I get paranoia, but come on. I'd rather open it, and monitor for strange activity/fail2ban to automate banning malicious actors. Don't overthink it. We're sharing pictures, not government secrets.
- OJFord 4y agoYou introduced 'generic', as far as I can tell? Maybe they're personal, family, including children, etc. all sorts of things perfectly reasonable not to want 'on the internet' but to share with somebody else specific (by using the internet, sure).
- hatware 4y agoGuess they should use a service like google photos to share them with individuals. Nobody is whitelisting dynamic IP addresses thinking it's secure.
- yjftsjthsd-h 4y ago... Or, they could use a private server with http simple auth, and be perfectly secure without having to give all their personal photos to Google
- rtev 4y agoRight? There are a lot of very complex suggestions for this simple problem. To simplify even more, based on the use case, it would probably be fine to just share an inline user:pass@site.com link. That would avoid even needing the user to fill a basic auth form.