Encrypt traffic between firefly and database #2

New Issue

knoflook · 2021-08-11T08:24:50Z

knoflook commented

2021-08-11 08:24:50 +00:00

As can be seen here:
coop-cloud/organising#114

As can be seen here: https://git.coopcloud.tech/coop-cloud/organising/issues/114

decentral1se commented

2021-08-11 09:20:33 +00:00

Unless you have worries that your in-stack containers can be addressed publicly, then this is probably overkill? We're not doing this with any other apps fwiw. Open to reasoning to change that but that's where we're at now.

knoflook commented

2021-08-11 09:27:03 +00:00

My understanding of docker networking is extremely basic but from what I understand you can sniff trafic on internal networks by performing some kind of ARP spoofing. While it's a highly improbable scenario, preventing it shouldn't be too difficult.
Here's a 52 page pdf about attacking containers that I skimmed over, saw C snippets and immediately closed: https://www.nccgroup.com/globalassets/our-research/us/whitepapers/2016/june/abusing-privileged-and-unprivileged-linux-containers.pdf

My understanding of docker networking is extremely basic but from what I understand you can sniff trafic on internal networks by performing some kind of ARP spoofing. While it's a highly improbable scenario, preventing it shouldn't be too difficult. Here's a 52 page pdf about attacking containers that I skimmed over, saw C snippets and immediately closed: https://www.nccgroup.com/globalassets/our-research/us/whitepapers/2016/june/abusing-privileged-and-unprivileged-linux-containers.pdf

knoflook commented

2021-08-11 09:28:16 +00:00

Also I think it's better to talk about it in here
coop-cloud/organising#114

Also I think it's better to talk about it in here https://git.coopcloud.tech/coop-cloud/organising/issues/114

Sign in to join this conversation.