|
1)
Message boards :
Number crunching :
HTTPS for Master URL please
(Message 3179)
Posted 28 Nov 2021 by Bryan Quigley Post: The Windows version 7.6.20 should make the http->https seamless (has been out for some time) - it did include the previously mentioned patch. Mac/Linux users likely still have to do the detach/re-attach dance (it's unlikely to reach all Linux users for a while - and there isn't a new Mac build available yet). |
|
2)
Message boards :
Number crunching :
HTTPS for Master URL please
(Message 3125)
Posted 2 Oct 2021 by Bryan Quigley Post: Yes, the master_url (https://numberfields.asu.edu/NumberFields/get_project_config.php) or project url that BOINC does the initial connection with. 2 years ago the patch for handling http->https changes automatically wasn't there. Depending on how many users have upgraded to a version that includes it, it should go much better. (Also importantly, your cert doesn't seem affected by the recent BOINC CA issues..) |
|
3)
Message boards :
Number crunching :
HTTPS for Master URL please
(Message 3122)
Posted 1 Oct 2021 by Bryan Quigley Post: This would ensure no information is transmitted in plain text and reduce the attack possibilities against client computers. I know a lot of info is already transmitted encrypted, but the initial connection is a weak point. For older clients, it requires a detach and reattach. For newer clients it will handle adding HTTPS itself. (See https://github.com/BOINC/boinc/commit/b695ca2c05c42814bd832d17134dfefd4c9969ac) I've pledged to contribute my resources to any projects that switch as a way to help mitigate any potential losses (I'm hoping others join me on that). See BOINC thread here: https://github.com/BOINC/boinc/issues/1345 |