4 ms·
Or a bit more generically, having a configurable allowlist of hosts, so I can make my ESP32 just a dumb "sensors on a microcontroller" thing pushing data to a R
by pedrovhb 4y ago
Or a bit more generically, having a configurable allowlist of hosts, so I can make my ESP32 just a dumb "sensors on a microcontroller" thing pushing data to a RPi on my local home network, which has static IPs provided to certain devices via DHCP. Having to add an auth header isn't a great deal of work, but it'd be handy to be able to try things out quickly. IMO the great thing about all this is how frictionless it is.
- simonw 4y agoI like that: I can have a thing where you can provide "localhost" but can also provide other host names and IPs too.
- vorpalhex 4y agoThat approach also makes things more docker friendly.
- tlarkworthy 4y agoUnfortunately the host header is spoofable
- simonw 4y agoYou mean the HTTP host header? Yeah that's a good call: I need to do these checks only based on IP. I could allow users to enter host names which I would resolve to the IP before checking though, which matches how networking is used in things like Kubernetes.