Flinging/casting content using our Plex Companion protocol will not always be secure.There are a few, very specific circumstances in which communication won’t be secure: If you stream media from the Server, that’s also secured. When you’re using a Plex app that supports secure connections (see below) to connect with a secure Plex Media Server, the requests to and communication with that Server are secure. Related Page: Filippo Valsorda: How Plex is doing HTTPS for all its users Are All the Communications Secured?
If you’re interested in some of the more technical details, Filippo Valsorda did an excellent writeup.
The end result is that you get that beautiful lock and a secure connection! (Note that while certificates were originally provided by “Digicert”, which is referenced in the quote, certificates are currently provided by “Let’s Encrypt”.) So we’ve worked some DNS magic to remove that limitation, and make things Just Work. Certificates are generally associated with a small set of unchanging IP addresses. At any given time, it may be accessible via multiple addresses. Last of all, the media server can be accessed both remotely and on a LAN. Let’s just say the Plex Media Server is an overachiever! Its parents are so proud. Thankfully there are tools to help with that, and they even give you a grade. Next is the server itself, which doesn’t just have to support HTTPS, it has to do so avoiding many pitfalls, crocodiles, and whatever else was in that awesome game. For example, did you know that Internet Explorer requires Diffie-Hellman parameters to be larger than 512 bits? Did you know that certain models of LG TVs ship with a specific set of root certificates which is missing some common ones you might expect? Frankly, I hope you have no clue what I’m talking about here, because it gave us some major headaches along the way. Secondly, as mentioned before, we’re on a lot of platforms, and there are lots of nuances to secure communication. And that’s why we hooked up with the amazing team at DigiCert, and they were all “you want an ungodly amount of certs? We can do that!” So yeah, we’re buying you all DigiCert certificates for your media servers. And we knew we wanted to give a secure experience to everyone, not just our Plex Pass users. For starters, they’re expensive, especially when multiplied by a bazillion. It’s a pretty laughable security experience if the browser warns you that your server isn’t trusted! We knew from the start that we needed real, official certificates, and there are a few problems with that. Now anyone can make a (self-signed) certificate, but it can be tedious to install, and for a browser to trust it and give it that elusive green lock, it has to have been signed by a trusted authority. Let’s look at some of the complexities: For starters, secure communication requires something called a certificate, which securely identifies a website. Our blog post announcing the release of secure communications spoke about some of the details: You can safely and securely connect to your media no matter where you are.Īfter all, everyone loves to see beautiful secure locks, right?
#Universal media server windows firewall xbox install#
There’s no need to set up VPNs and no need to create and install your own certs. Plex has teamed up with Let’s Encrypt to provide our users with high-quality secure certificates for your media servers, at no cost to you. When browsing the internet or making other connections these days, everyone wants to make sure that the communication taking place is secure and encrypted. What’s the Deal With Secure Connections? Why Is It Important?
0 kommentar(er)
