Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ability to use UNIX domain sockets for improved security. (can we even do this on Android?) #3

Open
3 tasks
RangerMauve opened this issue Mar 7, 2022 · 0 comments

Comments

@RangerMauve
Copy link
Member

RangerMauve commented Mar 7, 2022

Raw HTTP handlers can open us to side-channels for talking to the IPFS daemon, ideally we should scope it to just allowing Agregore Mobile to talk to the gateway.

  • Check if we can use UNIX domain sockets on Android
  • Listen on UNIX domain sockets in the daemon (Added in 97742dd but then reverted in 7e29d9b)
  • Have some sort of scoped socket identifier to the Agregore Mobile app?
@RangerMauve RangerMauve created this issue from a note in Agregore Mobile Devgrant (To do) Mar 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant