[Question] snapcast over internet?

[emagra]

How much would you recommend using snapcast on the web? I mean, the server located on someone private home behind a normal home modem/router (with open port 1704,1705,40978,39940,39942 (are those all needed?)) and the client on the smartphone. Talking about security more then anything.
Thoughts?

[badaix]

I would not recommend doing tihs. Snapcast doesn't use any encryption, authentication or authorization. It's on the roadmap to support TLS in some future version.
You can of course use an IPSec tunnel, i.e. some VPN solution.
Right now everyone could control your server over port 1705 and listen to your music on port 1704. Also I never "fuzz-tested" the server, in sense of sending some random data. Maybe the server would crash by some stack overflow, enabling remote code execution.
Regarding ports: I'm only aware of 1704 (audio), 1705 (control) and 1780 (Websocket). Maybe 39940 and 39942 is used by avahi zero conf, which would not work over the internet anyways (will just work in a broadcast domain, i.e. in your LAN).

[6i6i]

I've tried it with openvpn to my home network and it works quite well. So I would suggest to setup some VPN in your case.

[badaix]

you're welcome